gpt-image-gen
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust credential resolution process in
scripts/gen.pyto allow authenticated access to image generation services. - It scans for
OPENAI_API_KEYin environment variables and local.envfiles. - It accesses platform-specific authentication tokens at
~/.pi/agent/auth.jsonto facilitate integration with the host agent. - This behavior is clearly documented in
SKILL.mdandreferences/auth-pitfalls.md. - [SAFE]: The skill performs dynamic path manipulation to access internal agent libraries.
scripts/gen.pymodifiessys.pathto include the agent's installation directory for importingagent.auxiliary_client.- This is used to read authorized Codex tokens from the host platform's internal store.
- [SAFE]: All network activity is directed toward well-known and trusted endpoints.
- Data such as prompts and images are transmitted to
api.openai.comandchatgpt.com. - The
urllib.requestmodule is used to retrieve generated images from URLs provided by the official OpenAI API.
Audit Metadata