bfl-api
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for BFL API integration. No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. All described workflows and code examples align with the stated purpose of building production-ready integrations with a well-known service.
- [CREDENTIALS_UNSAFE]: Analysis of the API key setup instructions confirms adherence to secure development practices. The skill explicitly advises users to store secrets in environment variables or
.envfiles protected by.gitignoreto prevent accidental credential leakage to version control. - [EXTERNAL_DOWNLOADS]: Network operations are directed exclusively toward official Black Forest Labs endpoints (e.g., api.bfl.ai, api.eu.bfl.ai) and established infrastructure providers (e.g., Azure Blob Storage for result delivery). This behavior is required for the skill's intended functionality.
Audit Metadata