image-2-image-to-image
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard API integration patterns for a legitimate image generation service (AI Hive).
- [SAFE]: Sensitive configuration management follows best practices by storing the API key in a user-restricted file (
~/.ai-hive/config.json) with0600permissions. The instructions and code also explicitly warn against committing real API keys. - [SAFE]: Network operations are limited to the official vendor domain (
ai-hive.iclip.cn) for API requests and standard object storage URLs for media uploads. No data exfiltration or unauthorized access patterns were identified. - [SAFE]: Command execution is restricted to the skill's own CLI and standard Python calls, with no dynamic code execution or obfuscation.
Audit Metadata