gpt-imagegen

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements proactive network security measures to prevent Server-Side Request Forgery (SSRF). The generate_image.py script validates all remote URLs and performs DNS resolution checks to ensure that requests do not target loopback, private, or non-global IP addresses.
  • [SAFE]: Credential management follows security best practices. The skill documentation and scripts facilitate the use of environment variables or local configuration files with restricted permissions (0600) to protect API keys from unauthorized access by other users or processes on the host.
  • [SAFE]: The skill significantly reduces supply chain risk by operating with zero third-party dependencies. All image processing and network communication logic is built exclusively using the Python standard library.
  • [SAFE]: Static analysis identified the use of dynamic imports in check_environment.py; however, these are used safely to verify the presence of a hardcoded list of standard library modules and do not accept external input.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 06:11 AM