image-vectorize-api
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill instructs the agent to retrieve an API key from an environment variable or a local file at
~/.pixazo/api-key. It includes instructions to save the key to this location with restricted permissions (chmod 600). - [DATA_EXFILTRATION]: The skill transmits the user's API key and image URLs to the vendor's API endpoint at
https://gateway.pixazo.ai/media-tools/v1/image-vectorize. This is the intended functionality of the skill. - [EXTERNAL_DOWNLOADS]: The agent is directed to fetch additional model specifications and parameter references from the vendor's website at
https://www.pixazo.ai/models/image-vectorize-api.md. - [COMMAND_EXECUTION]: The documentation provides an
npxcommand to install a collection of related skills from the vendor's GitHub organization (Pixazo-AI/skills).
Audit Metadata