ai-core/media-generation

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documentation describes standard usage of the tanstack-ai library for media generation, following established patterns for AI integration.
  • [EXTERNAL_DOWNLOADS]: References to external services including OpenAI, Google Gemini, Fal.ai, OpenRouter, and BytePlus are legitimate and point to well-known service providers or their official API endpoints.
  • [CREDENTIALS_SAFE]: The documentation refers to environment variables such as OPENAI_API_KEY, ARK_API_KEY, and BYTEPLUS_VOICE_API_KEY as standard configuration mechanisms for AI adapters, which is a safe and recommended practice for secret management.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes processing user-provided prompts for media generation. While this represents a standard attack surface for AI applications, the documentation correctly describes the library's intended behavior (sending text verbatim) without introducing malicious bypasses or instructions to ignore safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 08:29 PM
Security Audit — agent-trust-hub — ai-core/media-generation