temu-ecommerce-image-generation-editing
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation and examples for executing its internal Python script
scripts/imagegen.py. These commands are standard for tool operation and involve interacting with the vendor's own API service. - [SAFE]: The skill uses a standard configuration management pattern, storing sensitive API keys in a local file (
~/.ai-hive/config.json) with restricted filesystem permissions (0600), which is a security best practice for CLI tools. - [SAFE]: External network communication is restricted to the vendor's own API domain (
ai-hive.iclip.cn) for legitimate functionality such as media uploads and image generation tasks. - [SAFE]: The
initcommand uses the standardwebbrowsermodule to facilitate a human-in-the-loop authentication process, directing users to the official platform to generate their own API keys rather than using hardcoded credentials.
Audit Metadata