product-shots-image-gen
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a
scripts/setup.shutility to automate the installation of necessary Python dependencies. This script performs version checks and usespipto ensure required libraries are present. - [EXTERNAL_DOWNLOADS]: The skill relies on well-known Python packages (
requestsandPillow) from the official PyPI registry for its core functionality. - [SAFE]: The skill implements robust security practices for handling sensitive API keys. It instructs users to provide tokens via environment variables or hidden configuration files with restricted permissions (
chmod 600), explicitly warning against pasting credentials into chat or hardcoding them in the source code. Requests are sent over HTTPS to the vendor's API gateway.
Audit Metadata