image-gen
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with legitimate AI services from Google and OpenAI using their official Node.js SDKs, as declared in the dependencies.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets are present. The skill uses environment variables and command-line arguments for authentication, which is a standard and secure practice.
- [DATA_EXFILTRATION]: Network activity is strictly limited to sending prompts and image data to the specified AI providers for processing. No sensitive local files are accessed or transmitted to unauthorized destinations.
- [OBFUSCATION]: The source code is clear and readable. No hidden payloads, encoded commands, or deceptive text patterns were found.
- [COMMAND_EXECUTION]: The skill runs a pre-bundled JavaScript tool that performs specific, documented tasks. It does not spawn arbitrary shells or execute untrusted code strings.
Audit Metadata