image-gen
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads generated images from the vendor's own infrastructure (redfox.hk) after processing. This is the core functionality of an image generation tool.
- [COMMAND_EXECUTION]: The skill uses local script execution via
python3to interact with the image generation service. All executed commands are transparent and match the stated purpose of the skill. - [DATA_EXPOSURE]: The skill reads from a local configuration file at
~/.qoder/apis/redfox.jsonand accesses theREDFOX_API_KEYenvironment variable. This is a standard and recommended practice for managing API credentials rather than hardcoding them. - [NETWORK_OPERATIONS]: The skill performs HTTP POST and GET requests to
redfox.hkfor task submission, image uploading, and downloading results. These operations are essential for the skill's functionality and use SSL verification.
Audit Metadata