sn-image-doctor
Warn
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/check_environment.pyperforms dynamic module loading by manipulatingsys.pathat runtime. Specifically, it inserts a computed path (skills/sn-image-base/scripts) into the Python module search path to import theglobal_configsobject. Loading code from dynamically constructed paths can lead to unexpected execution if the directory structure is modified by an attacker.\n- [DATA_EXFILTRATION]: Theinspect_configsfunction prints the entire resolved configuration state to standard output usingglobal_configs.to_string(). As this skill is designed to manage and validate sensitive credentials such asSN_API_KEYandSN_IMAGE_GEN_API_KEY, printing these values in diagnostic output poses a risk of accidental credential exposure in logs or terminal history if the configuration object does not implement proper field redaction.
Audit Metadata