q-infographics
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires several standard Python libraries:
openai,google-genai,Pillow, andmarkitdown. These are well-known packages from trusted vendors (OpenAI, Google, Microsoft/MarkItDown). - [COMMAND_EXECUTION]: The skill's workflow involves executing shell commands to run Python scripts (
gen_story.py,gen_image.py) and themarkitdownCLI tool. These are used for their intended purpose of content processing and API interaction. - [REMOTE_CODE_EXECUTION]: While the skill interacts with the OpenAI and Gemini APIs to generate text and images, it does not download and execute arbitrary remote code or pipe shell commands from the internet.
- [DATA_EXFILTRATION]: The skill transmits the contents of the user's document to the specified LLM APIs (OpenAI or Google) for processing. This is the primary function of the skill. It requires standard API keys (
OPENAI_API_KEYorGEMINI_API_KEY) provided by the user via environment variables.
Audit Metadata