find-me-a-museum-image
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches artwork and metadata from established cultural institutions, including the Art Institute of Chicago, The Metropolitan Museum of Art, and the Smithsonian. These are well-known and trusted domains for open-access cultural data.\n- [CREDENTIALS_UNSAFE]: The script properly handles the optional Smithsonian API key by reading it from an environment variable (SMITHSONIAN_API_KEY) rather than using hardcoded values.\n- [COMMAND_EXECUTION]: The skill's functionality is contained within a Python script that uses standard library modules; it does not invoke external shell commands, subprocesses, or dynamic execution functions (like eval or exec).\n- [SAFE]: The code includes an explicit check and fallback for SSL certificate verification issues common on some platforms. This behavior is documented for the user and prints a warning to stderr when activated, representing a pragmatic approach to connectivity for public data rather than a hidden security bypass.
Audit Metadata