image-to-svg
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches API documentation and usage guidelines from the service provider's official domain (docs.quiver.ai).
- [DATA_EXFILTRATION]: Sends image data to the QuiverAI API (api.quiver.ai) for processing. This is a core part of the skill's intended functionality and is performed using authenticated requests.
- [CREDENTIALS_UNSAFE]: Implements secure secret management by sourcing the QUIVERAI_API_KEY from a local configuration file (~/.config/opencode/skills/image-to-svg/.env) instead of using hardcoded values.
- [COMMAND_EXECUTION]: Employs standard system utilities such as curl, jq, and base64 to handle file conversion and network communication, adhering to documented API requirements.
Audit Metadata