gpt-imagegen
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements proactive network security measures to prevent Server-Side Request Forgery (SSRF). The
generate_image.pyscript validates all remote URLs and performs DNS resolution checks to ensure that requests do not target loopback, private, or non-global IP addresses. - [SAFE]: Credential management follows security best practices. The skill documentation and scripts facilitate the use of environment variables or local configuration files with restricted permissions (0600) to protect API keys from unauthorized access by other users or processes on the host.
- [SAFE]: The skill significantly reduces supply chain risk by operating with zero third-party dependencies. All image processing and network communication logic is built exclusively using the Python standard library.
- [SAFE]: Static analysis identified the use of dynamic imports in
check_environment.py; however, these are used safely to verify the presence of a hardcoded list of standard library modules and do not accept external input.
Audit Metadata