image-gen-skill
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements image generation by calling a dedicated cloud function (
image-gen-handler). This follows the principle of least privilege by keeping sensitive AI model invocations and network operations (fetching generated images) on the server-side rather than the client. - [SAFE]: External resource access is restricted to official vendor services. The cloud function fetches generated images from temporary URLs using the Node.js
httpsmodule and immediately uploads them to the developer's own WeChat Cloud Storage (ai-images/{uid}/image-gen/). This is standard procedure for persisting AI-generated content. - [SAFE]: The dependencies (
wx-server-sdkand@cloudbase/node-sdk) are official, well-known packages for WeChat Mini Program and Tencent CloudBase development. - [SAFE]: Data handling is localized to the user's own cloud environment. The skill uses
OPENIDto segment storage paths, ensuring users can only access their own generated images. - [SAFE]: No obfuscation, prompt injection attempts, or unauthorized persistence mechanisms were found in the codebase.
Audit Metadata