bfl-api

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides technical documentation and production-ready code examples for integrating with the Black Forest Labs (BFL) FLUX API.
  • [SAFE]: Security best practices for API key management are highlighted, including instructions for using .env files and .gitignore to prevent accidental disclosure of credentials.
  • [SAFE]: The Python and TypeScript client examples include robust implementations for authentication, rate limiting, and secure webhook signature verification using standard cryptographic libraries (HMAC-SHA256).
  • [SAFE]: Network activity is restricted to legitimate vendor endpoints (api.bfl.ai, api.eu.bfl.ai, api.us.bfl.ai) and standard cloud delivery infrastructure.
  • [SAFE]: No evidence of prompt injection, code obfuscation, privilege escalation, or persistence mechanisms was found in the skill instructions or referenced scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 01:56 AM