tripo3d
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches model configuration and technical specifications from the vendor's official domain (
pixazo.ai). These references are used to maintain up-to-date parameter schemas and polling logic. - [COMMAND_EXECUTION]: The skill uses standard command-line tools (
curl) and scripting languages (Python, Node.js) to interact with the Pixazo API. These operations are restricted to the vendor's API gateway (gateway.pixazo.ai). - [CREDENTIALS_SAFE]: The skill implements secure credential management. It checks for a
PIXAZO_API_KEYin environment variables or a local file (~/.pixazo/api-key). When creating the local key file, it correctly useschmod 600to ensure only the current user can read or write the file.
Audit Metadata