grok-media
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and instructional guidelines. It does not contain any executable scripts, shell commands, or automated package installations.
- [SAFE]: Authentication procedures follow security best practices by utilizing the
XAI_API_KEYenvironment variable rather than hardcoding sensitive credentials. - [EXTERNAL_DOWNLOADS]: The skill references official xAI API endpoints (https://api.x.ai/v1) for its media generation tasks. These are legitimate, well-known service domains and do not represent a security risk.
- [SAFE]: The skill provides structured guidance for handling external image content (URLs and base64 data URIs), which is standard for image processing applications and does not expose the agent to unexpected vulnerabilities beyond typical generative AI usage.
Audit Metadata