Stock Photo APIs
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code examples for interacting with legitimate stock photo services (Unsplash, Pexels, and Pixabay).
- [SAFE]: It explicitly instructs users to store API keys in environment variables (
process.env.UNSPLASH_ACCESS_KEY) and warns against shipping secrets in client-side code, which is a security best practice. - [SAFE]: The network operations are limited to well-known, official API endpoints for these services (e.g.,
api.unsplash.com,api.pexels.com). - [SAFE]: The instructions focus on compliance and robust error handling (rate limiting, retries), which are standard development concerns rather than security risks.
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation patterns were found in the instructions or code snippets.
Audit Metadata