youtube-thumbnails
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interfaces with Google's Generative Language API (
generativelanguage.googleapis.com) to generate image assets, which is a well-known service essential for its function. - [COMMAND_EXECUTION]: The instructions include usage of the
sipssystem utility for image resizing, which is a standard macOS operation for processing visual content. - [SAFE]: The script reads API credentials from the
GEMINI_API_KEYenvironment variable or the local file~/.gemini_api_key. This is a standard and documented method for managing credentials in CLI-based AI tools. - [SAFE]: The provided Python script uses only standard library modules, ensuring no risks from untrusted third-party packages.
- [SAFE]: The skill processes user-provided content to generate image prompts using highly structured templates, which limits the potential for indirect prompt injection to affect the static image output.
Audit Metadata