imgen

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill defines several CLI commands to be executed by the agent, including npm run, npx tsx, and the imgen binary. These are used to interface with the image generation and processing logic.
  • [CREDENTIALS_UNSAFE]: Instructions are provided for setting up Azure OpenAI authentication using environment variables or .env files. The search order for .env files includes the current directory and the user's home directory (~/.imgen/.env), which is standard for CLI applications. No sensitive credentials are hardcoded in the skill.
  • [EXTERNAL_DOWNLOADS]: The skill mentions using npx and npm, which may download the tsx package or the @nogataka/imgen package from the public npm registry. These are recognized as standard development tools and vendor-specific resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 05:25 PM