image-gen

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated images from the vendor's own infrastructure (redfox.hk) after processing. This is the core functionality of an image generation tool.
  • [COMMAND_EXECUTION]: The skill uses local script execution via python3 to interact with the image generation service. All executed commands are transparent and match the stated purpose of the skill.
  • [DATA_EXPOSURE]: The skill reads from a local configuration file at ~/.qoder/apis/redfox.json and accesses the REDFOX_API_KEY environment variable. This is a standard and recommended practice for managing API credentials rather than hardcoding them.
  • [NETWORK_OPERATIONS]: The skill performs HTTP POST and GET requests to redfox.hk for task submission, image uploading, and downloading results. These operations are essential for the skill's functionality and use SSL verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 06:06 PM
Security Audit — agent-trust-hub — image-gen