bfl-api
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides technical documentation and production-ready code examples for integrating with the Black Forest Labs (BFL) FLUX API.
- [SAFE]: Security best practices for API key management are highlighted, including instructions for using
.envfiles and.gitignoreto prevent accidental disclosure of credentials. - [SAFE]: The Python and TypeScript client examples include robust implementations for authentication, rate limiting, and secure webhook signature verification using standard cryptographic libraries (HMAC-SHA256).
- [SAFE]: Network activity is restricted to legitimate vendor endpoints (api.bfl.ai, api.eu.bfl.ai, api.us.bfl.ai) and standard cloud delivery infrastructure.
- [SAFE]: No evidence of prompt injection, code obfuscation, privilege escalation, or persistence mechanisms was found in the skill instructions or referenced scripts.
Audit Metadata