skills/openai/skills/imagegen/Gen Agent Trust Hub

imagegen

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [Credential Management]: The skill uses an environment variable for the OpenAI API key when running in CLI fallback mode. It explicitly instructs against requesting the key in plaintext chat, which is a standard security measure to prevent credential leakage.
  • [Network Connectivity]: The skill makes outbound API calls to OpenAI services to generate and edit images. This is a required function of the skill, and documentation is provided to help users manage network permissions and approvals.
  • [File Operations]: The skill interacts with the local filesystem to read source images and save generated results. It follows a non-destructive approach by checking for existing files and using specific output directories, which helps maintain workspace organization.
  • [Standard Dependencies]: The skill utilizes the official openai SDK and the well-known pillow library for image handling. These tools are used within their intended scope for API communication and image resizing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 10:35 AM