gpt-image-2-marketing-image
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages sensitive API credentials securely. The
imagegen.pyscript creates a local configuration file (~/.ai-hive/config.json) and explicitly sets restricted file permissions (0o600) to prevent other users on the system from reading the API key. - [SAFE]: Network activity is restricted to the legitimate service domain (
ai-hive.iclip.cn). The script uses therequestslibrary to perform standard API operations, media uploads via pre-signed URLs, and result downloads. - [SAFE]: Local file system interaction is limited to reading user-specified reference images for upload and saving generated results to a dedicated directory in the user's Downloads folder.
- [SAFE]: The script uses standard libraries for its operations and does not contain any obfuscated code, dynamic execution of untrusted strings, or attempts to gain elevated system privileges.
Audit Metadata