lovart
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages authentication through documented environment variables (
LOVART_ACCESS_KEY,LOVART_SECRET_KEY) to generate HMAC-SHA256 signatures for API requests. - [SAFE]: All network activity is restricted to the legitimate service domains
lgw.lovart.aiandlovart.infofor API interaction and documentation. - [SAFE]: The skill utilizes common system utilities (
curl,openssl,date,awk) for functional requirements and does not attempt to download or execute external code from untrusted sources. - [SAFE]: Prompt interpolation is handled via temporary JSON files in
/tmp/, following standard practices for handling shell-based API interactions. - [SAFE]: No patterns of obfuscation, persistence, privilege escalation, or data exfiltration to unauthorized domains were detected.
Audit Metadata