generate-image

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official Leonardo AI API endpoints (https://cloud.leonardo.ai/api/rest/v1 and v2) for all generation and balance checks. No unauthorized third-party network activity was found.\n- [SAFE]: Secret management is handled securely. The LEONARDO_API_KEY is loaded from the environment or a local .env file and is masked in all log outputs using a redaction utility in lib/log.mjs.\n- [SAFE]: The skill relies on built-in Node.js modules and does not include any external npm dependencies, minimizing the risk of supply chain vulnerabilities.\n- [SAFE]: File operations are restricted to generating image files and provenance metadata (sidecar JSON) in the current working directory or a specified output folder. The skill includes integrity checks for downloaded content using SHA256 hashes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:39 AM