hailuo
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages service credentials using a local configuration file (
~/.pixazo/api-key) and environment variables. It follows security best practices by instructing the agent to restrict file permissions to the owner only (chmod 600). - [SAFE]: All network operations are directed to verified vendor infrastructure (
pixazo.ai), including the API gateway for video generation and the official website for documentation. - [SAFE]: The agent is instructed to fetch auxiliary documentation from the vendor's domain to retrieve model-specific technical parameters, which is a legitimate use of remote content to guide agent behavior.
Audit Metadata