ecommerce-main-image

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a Python script (scripts/imagegen.py) to interface with the AI Hive API. The script executes commands for generating images, polling task status, and uploading media. These operations are standard for the skill's described purpose.
  • [EXTERNAL_DOWNLOADS]: The script downloads generated image results from URLs provided by the AI Hive API (e.g., ai-hive.iclip.cn). These downloads are directed to the user's local ~/Downloads/AiHive directory and are initiated only upon successful task completion.
  • [CREDENTIALS_UNSAFE]: The skill manages API keys using a local configuration file (~/.ai-hive/config.json) and environment variables (AI_HIVE_API_KEY). The script includes logic to automatically set file permissions to 0600 (read/write by owner only) for the configuration file, which is a recognized security best practice for protecting sensitive data.
  • [SAFE]: The skill depends on the well-known requests Python library. It communicates with the domain ai-hive.iclip.cn, which is the legitimate endpoint for the service described in the skill's metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:19 PM
Security Audit — agent-trust-hub — ecommerce-main-image