skills/nexscope-ai/nexscope-ecommerce-skills/ecommerce-multimodal-generate-image/Gen Agent Trust Hub
ecommerce-multimodal-generate-image
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill utilizes environment variables (
NEXSCOPE_API_KEY,NEXSCOPE_PROXY_BASE) to manage authentication and API routing. This is a standard and recommended practice for secret management in development environments. - [COMMAND_EXECUTION]: The provided Python scripts (
multimodal_generate_image.pyandupload_image.py) perform network requests using the standardurlliblibrary. These requests are directed toward the vendor's infrastructure for image processing and asset management. The scripts also write to the local file system to maintain a cache and session logs in anexscopedirectory within the user's home or current working directory. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided text prompts and image data as inputs for generation and editing tasks. While the skill does not implement explicit boundary markers or sanitization for these inputs before sending them to the API, the scope of operation is limited to multimodal generation, posing a low risk of influencing broader agent behavior.
Audit Metadata