Skills
Navigate
skills/wubin1836/ai-hive-agent-skills/image-2-ecommerce-main-image/Gen Agent Trust Hub

image-2-ecommerce-main-image

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [SAFE]: The skill script imagegen.py implements security best practices by applying restricted file permissions (0600) to the local configuration file ~/.ai-hive/config.json to protect the API key.
  • [SAFE]: All network requests in imagegen.py utilize explicit timeouts to prevent hanging processes and ensure session reliability.
  • [EXTERNAL_DOWNLOADS]: The skill downloads generated image and video assets from the vendor's API endpoint at ai-hive.iclip.cn to the user's local Downloads directory.
  • [DATA_EXFILTRATION]: The skill uploads user-specified local media files to the AI Hive infrastructure as reference images for the generation process, which is the intended core functionality of the skill.
  • [COMMAND_EXECUTION]: The skill provides a Python-based CLI that the agent uses to coordinate file uploads, task polling, and result downloading via the requests library.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 12:20 PM
Security Audit — agent-trust-hub — image-2-ecommerce-main-image