blog-cover-generator
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'blog-cover-image-cli' package and uses the '@opendirectory.dev/skills' utility via npx. These resources are provided by the developer and are essential for the skill's primary function of image generation.\n- [COMMAND_EXECUTION]: The agent is instructed to run shell commands to configure API keys and trigger the image generation process. This is the intended behavior for a CLI-based tool.\n- [CREDENTIALS_UNSAFE]: The skill manages Gemini and Brandfetch API keys. It follows industry-standard security practices by storing these keys locally using the 'conf' package rather than hardcoding credentials or sending them to unverified remote endpoints.\n- [PROMPT_INJECTION]: The skill processes user-supplied titles as an ingestion point for image generation. While no explicit boundary markers or sanitization routines are documented, the risk is negligible as the capability is restricted to generating image files.
Audit Metadata