stability-ai
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard CLI utilities including
curl,jq, andbase64to communicate with the Stability AI API and process image data. These operations are restricted to the intended purpose of image generation. - [EXTERNAL_DOWNLOADS]: Interacts with
api.stability.ai, which is the official well-known service domain for Stability AI. It also references the author's own domainapp.vm0.aifor connector setup, which is an expected vendor resource. - [CREDENTIALS_UNSAFE]: Appropriately manages API authentication by referencing an environment variable (
$STABILITY_TOKEN) rather than hardcoding secrets, adhering to secure credential management practices. - [DATA_EXFILTRATION]: No unauthorized data transmission was detected. File operations are confined to the
/tmp/directory for processing transient image files, which is standard for image generation tasks.
Audit Metadata