skills/vm0-ai/vm0-skills/stability-ai/Gen Agent Trust Hub

stability-ai

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard CLI utilities including curl, jq, and base64 to communicate with the Stability AI API and process image data. These operations are restricted to the intended purpose of image generation.
  • [EXTERNAL_DOWNLOADS]: Interacts with api.stability.ai, which is the official well-known service domain for Stability AI. It also references the author's own domain app.vm0.ai for connector setup, which is an expected vendor resource.
  • [CREDENTIALS_UNSAFE]: Appropriately manages API authentication by referencing an environment variable ($STABILITY_TOKEN) rather than hardcoding secrets, adhering to secure credential management practices.
  • [DATA_EXFILTRATION]: No unauthorized data transmission was detected. File operations are confined to the /tmp/ directory for processing transient image files, which is standard for image generation tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 01:52 AM
Security Audit — agent-trust-hub — stability-ai