img-gen-prompts
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/oip.pytool uses thesubprocessmodule to execute local Python scripts (prompt_library.py,oip_api.py) and standard developer tools likenpmandvite. These operations are used to query the archive and manage the local gallery server lifecycle. Commands are constructed using argument lists rather than shell strings, which follows security best practices. - [EXTERNAL_DOWNLOADS]: The skill instructions and scripts reference
npm run setupfor installing project dependencies and downloading the Git LFS image corpus. These are standard operations for a local tool of this nature. - [DATA_EXFILTRATION]: Network activity in the provided scripts is strictly limited to the loopback interface (
127.0.0.1). The script usesurllibfor internal health checks and to proxy gallery requests to the local Vite server, posing no risk of data exfiltration to external domains.
Audit Metadata