siliconflow-img-gen
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill's code is clean, well-documented, and its behavior aligns perfectly with its stated purpose of interacting with the Volcengine Ark image generation service.
- [COMMAND_EXECUTION]: The
subprocess.runcall identified inscripts/tests/test_gen.pyis used exclusively for unit testing the primary script's command-line interface (e.g., verifying help messages and error codes). It does not present a security risk to the agent's runtime environment. - [DATA_EXFILTRATION]: The skill uses the
AWK_API_KEYenvironment variable to authenticate with the official Volcengine Ark endpoint (ark.cn-beijing.volces.com). Network activity is confined to this established service and the image URLs returned by its API for the purpose of downloading results.
Audit Metadata