xyq-skill
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill routes specific image and video generation tasks to a local command-line interface (
pippit-tool-cli). The instructions include safety checks to verify the tool's presence before execution and use it as a dedicated bridge to the model platform. - [EXTERNAL_DOWNLOADS]: The skill contains a dedicated script (
download_results.py) used to fetch generated media assets. These downloads are performed from the platform's own infrastructure following successful task completion. - [CREDENTIALS_SAFE]: Authentication is managed securely through the
XYQ_ACCESS_KEYenvironment variable. The skill correctly instructs the agent on how to use these credentials for API calls without hardcoding sensitive information. - [DATA_EXPOSURE]: The skill facilitates the uploading of user-provided images, videos, and audio files to the platform for processing. This behavior is transparently documented and aligns with the primary purpose of an AI creation tool.
Audit Metadata