agent-gen-image
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install a custom command-line utility from the author's Homebrew tap using the command
brew install WHQ25/tap/rawgenai. This is a vendor-owned resource. - [COMMAND_EXECUTION]: The skill operates by invoking the
rawgenaibinary to perform image tasks, which involves executing shell commands with parameters derived from user instructions. - [CREDENTIALS_UNSAFE]: The documentation provides instructions to configure API keys for services like OpenAI, Google, and others using the
rawgenai config setcommand. It uses non-sensitive placeholders (e.g.,sk-...,AIza...) for example purposes and recommends standard practices for credential management.
Audit Metadata