image-gen

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated image files from the redfox.hk domain after processing is complete.
  • [COMMAND_EXECUTION]: The skill relies on the execution of a local Python script (assets/imagegen.py) to handle API interactions and file management.
  • [DATA_EXFILTRATION]: The skill transmits user-provided prompts and image files to https://redfox.hk for processing. This behavior is the core intended functionality of the image generation service.
  • [CREDENTIALS_UNSAFE]: The skill accesses a local configuration file at ~/.qoder/apis/redfox.json or checks environment variables to retrieve the REDFOX_API_KEY. This is a standard and acceptable method for managing service credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 12:31 PM
Security Audit — agent-trust-hub — image-gen