ecommerce-main-image
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/imagegen.py) to interface with the AI Hive API. The script executes commands for generating images, polling task status, and uploading media. These operations are standard for the skill's described purpose. - [EXTERNAL_DOWNLOADS]: The script downloads generated image results from URLs provided by the AI Hive API (e.g.,
ai-hive.iclip.cn). These downloads are directed to the user's local~/Downloads/AiHivedirectory and are initiated only upon successful task completion. - [CREDENTIALS_UNSAFE]: The skill manages API keys using a local configuration file (
~/.ai-hive/config.json) and environment variables (AI_HIVE_API_KEY). The script includes logic to automatically set file permissions to0600(read/write by owner only) for the configuration file, which is a recognized security best practice for protecting sensitive data. - [SAFE]: The skill depends on the well-known
requestsPython library. It communicates with the domainai-hive.iclip.cn, which is the legitimate endpoint for the service described in the skill's metadata.
Audit Metadata