story-cover
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to automate the interaction with an external API. These scripts use standard tools like curl, jq, and base64 and follow best practices such as quoting variables and using jq for JSON construction to prevent command injection.- [CREDENTIALS_UNSAFE]: The skill correctly uses environment variables (GPT_IMAGE_API_KEY) to manage authentication, which is the recommended method for handling secrets in this context.- [EXTERNAL_DOWNLOADS]: The skill provides functionality to download a reference image from a user-specified URL using curl. The downloaded content is stored in a temporary file and used as input for an image editing API, which is a standard operational pattern for this task.
Audit Metadata