flux-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is entirely composed of Markdown documentation providing guidance on image generation prompting. It contains no scripts, binaries, or automated workflows that could execute code or access the file system.
- [EXTERNAL_DOWNLOADS]: The skill references official Black Forest Labs (BFL) domains such as
bfl.aianddocs.bfl.aifor pricing and documentation. These are legitimate vendor resources and do not involve unauthorized data exfiltration or malicious payloads. - [NO_CODE]: There are no Python, Node.js, or shell scripts included in the skill. The analysis confirmed the absence of any code execution patterns, package installations, or remote code execution vectors.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive environment variables were found. The skill provides instructions for users to pass image URLs to an external API, which is the intended functional purpose of the model integration described.
Audit Metadata