remove-image-watermark

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes pnpm dlx to download and execute the @pilio/cli package from the NPM registry. This is a vendor-owned resource associated with the skill author.
  • [COMMAND_EXECUTION]: Shell commands are executed to run the watermark removal tool and poll for task completion. These operations are limited to the functionality of the Pilio CLI.
  • [SAFE]: The skill demonstrates secure configuration by requiring the PILIO_API_KEY to be sourced from the environment. It explicitly instructs the agent not to prompt the user for secrets and not to exfiltrate the key to result download URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 07:57 AM
Security Audit — agent-trust-hub — remove-image-watermark