generate

Pass

Audited by Gen Agent Trust Hub on Aug 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the velsgenerate CLI tool for various operations, including model registry updates, file uploads, and triggering media generation tasks.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the velsgenerate package from the npm registry during the setup process (npx -y velsgenerate setup). It also references docs.kie.ai for model registry updates and provides a command for downloading generated assets from remote URLs.
  • [REMOTE_CODE_EXECUTION]: The setup workflow uses npx, which downloads and executes code from the public npm registry to configure the local environment.
  • [DATA_EXFILTRATION]: The skill transmits user-provided text prompts and local media files (via the upload command) to the kie.ai API servers for processing and generation. This is the core intended functionality of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 5, 2026, 01:33 PM
Security Audit — agent-trust-hub — generate