c-kie-ai
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local Bash script,
sync-models.sh, which uses Python to parse and update available AI model metadata from a local registry. - [EXTERNAL_DOWNLOADS]: The skill communicates with legitimate, well-known AI service providers (kie.ai and fal.ai) to process media generation requests.
- [SAFE]: API credentials (KIE_AI_API_KEY and FAL_KEY) are sourced from
~/.gsai/secrets.env, following secure local practices for secret management rather than hardcoding sensitive data. - [SAFE]: Hardcoded local paths (e.g.,
/Users/vasanth/Code/...) refer to the author's development environment for model indexing and do not exhibit malicious intent.
Audit Metadata