imagegen
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [Credential Management]: The skill uses an environment variable for the OpenAI API key when running in CLI fallback mode. It explicitly instructs against requesting the key in plaintext chat, which is a standard security measure to prevent credential leakage.
- [Network Connectivity]: The skill makes outbound API calls to OpenAI services to generate and edit images. This is a required function of the skill, and documentation is provided to help users manage network permissions and approvals.
- [File Operations]: The skill interacts with the local filesystem to read source images and save generated results. It follows a non-destructive approach by checking for existing files and using specific output directories, which helps maintain workspace organization.
- [Standard Dependencies]: The skill utilizes the official
openaiSDK and the well-knownpillowlibrary for image handling. These tools are used within their intended scope for API communication and image resizing.
Audit Metadata