generate-image

The code appears to be a legitimate API client, with no evidence of malware or intentional obfuscation. Restrict request URLs to the expected Leonardo API origins before attaching credentials, and validate cache filenames to prevent path traversal.