imgen
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill defines several CLI commands to be executed by the agent, including
npm run,npx tsx, and theimgenbinary. These are used to interface with the image generation and processing logic. - [CREDENTIALS_UNSAFE]: Instructions are provided for setting up Azure OpenAI authentication using environment variables or
.envfiles. The search order for.envfiles includes the current directory and the user's home directory (~/.imgen/.env), which is standard for CLI applications. No sensitive credentials are hardcoded in the skill. - [EXTERNAL_DOWNLOADS]: The skill mentions using
npxandnpm, which may download thetsxpackage or the@nogataka/imgenpackage from the public npm registry. These are recognized as standard development tools and vendor-specific resources.
Audit Metadata