gpt-image-2-background-replace

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill depends on the requests Python library, which must be installed manually by the user using pip3 install requests as instructed in the documentation.
  • [COMMAND_EXECUTION]: The skill is implemented as a Python CLI script (scripts/imagegen.py) that performs network requests, file uploads, and downloads to facilitate the background replacement process. These operations are intended and transparent to the user.
  • [SAFE]: The script implements secure handling of API keys by storing them in ~/.ai-hive/config.json and automatically setting file permissions to 0600 (read/write for the owner only). This prevents other users on the same system from accessing the sensitive credentials.
  • [SAFE]: Network activity is restricted to the official service domain ai-hive.iclip.cn for authentication, task management, and media processing. The use of signed URLs for media uploads and downloads is a standard and secure industry practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:20 PM
Security Audit — agent-trust-hub — gpt-image-2-background-replace