tl-image
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard functionality for an image generation service. It includes well-documented procedures for authentication and usage.
- [COMMAND_EXECUTION]: The skill uses Python scripts (
scripts/tensorslab_auth.pyandscripts/tensorslab_image.py) to handle authentication and API interaction. These are part of the skill's core functionality. - [EXTERNAL_DOWNLOADS]: The skill downloads generated image files from the vendor's domains (
api.tensorslab.comandtensorai.tensorslab.com). This is expected behavior for an image generation service. - [CREDENTIALS_UNSAFE]: The skill manages a vendor API key (
TENSORSLAB_API_KEY). It follows security best practices by storing the key in a local hidden directory (~/.tensorslab/.env) and explicitly instructing the AI agent never to display or print the actual key value.
Audit Metadata