gemini-omni-1-1
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates video generation by wrapping the Pixazo API. All network requests target official vendor domains (pixazo.ai, gateway.pixazo.ai, api-console.pixazo.ai).
- [SAFE]: Secret management follows industry standards. The skill instructs the agent to store the user's API key in a hidden directory within the user's home folder (~/.pixazo/api-key) and explicitly sets restricted file permissions (chmod 600) to ensure only the owner can read it.
- [SAFE]: Documentation and configuration fetching (e.g., model definitions) are retrieved directly from the vendor's primary website using standard HTTP GET requests.
- [SAFE]: The skill mentions an installation command (npx skills add Pixazo-AI/skills) which references the vendor's official package repository.
Audit Metadata