skills/pippit-dev/cli/xyq-skill/Gen Agent Trust Hub

xyq-skill

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill routes specific image and video generation tasks to a local command-line interface (pippit-tool-cli). The instructions include safety checks to verify the tool's presence before execution and use it as a dedicated bridge to the model platform.
  • [EXTERNAL_DOWNLOADS]: The skill contains a dedicated script (download_results.py) used to fetch generated media assets. These downloads are performed from the platform's own infrastructure following successful task completion.
  • [CREDENTIALS_SAFE]: Authentication is managed securely through the XYQ_ACCESS_KEY environment variable. The skill correctly instructs the agent on how to use these credentials for API calls without hardcoding sensitive information.
  • [DATA_EXPOSURE]: The skill facilitates the uploading of user-provided images, videos, and audio files to the platform for processing. This behavior is transparently documented and aligns with the primary purpose of an AI creation tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 08:35 AM
Security Audit — agent-trust-hub — xyq-skill