freeimg-hunyuan

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis

The skill provides a script to interface with Tencent Cloud's Hunyuan image generation model. It identifies a dependency on the official '@cloudbase/node-sdk' and includes logic to automatically install this package from the public NPM registry if it is missing from the local environment. This installation is performed into a user-specific directory (~/.freeimg-hunyuan/sdk) using standard package management commands. API credentials (SecretId, SecretKey, and EnvID) are managed by the user and stored in a local configuration file with restricted file permissions (chmod 600) to prevent unauthorized access. The script communicates solely with official Tencent Cloud endpoints for image generation and does not exfiltrate data to unauthorized third-party services.

Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:03 AM