image-studio
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Node.js script (
tools/generate.js) to process user prompts and handle model-specific parameters. This is the intended mechanism for the skill's functionality. - [EXTERNAL_DOWNLOADS]: The project includes standard dependencies such as
@fal-ai/client, which is used for communicating with the fal.ai models. All dependencies are managed through standard package registries. - [DATA_EXFILTRATION]: The skill transmits user-provided image prompts to a hosted proxy at
image-gen-proxy.vercel.app. This network activity is disclosed in the documentation and is necessary for the skill's primary purpose of generating images via a centralized service. No sensitive local data or credentials are accessed or transmitted.
Audit Metadata