image-gen
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads generated image files from the
redfox.hkdomain after processing is complete. - [COMMAND_EXECUTION]: The skill relies on the execution of a local Python script (
assets/imagegen.py) to handle API interactions and file management. - [DATA_EXFILTRATION]: The skill transmits user-provided prompts and image files to
https://redfox.hkfor processing. This behavior is the core intended functionality of the image generation service. - [CREDENTIALS_UNSAFE]: The skill accesses a local configuration file at
~/.qoder/apis/redfox.jsonor checks environment variables to retrieve theREDFOX_API_KEY. This is a standard and acceptable method for managing service credentials.
Audit Metadata