qizhuo-selfie
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill interfaces with the WaveSpeed AI API (api.wavespeed.ai) for image generation, which is the intended functionality of the tool.
- [COMMAND_EXECUTION]: The skill utilizes a bash wrapper script to execute its Python logic, passing user-defined parameters which are then validated against a static template dictionary in the Python code.
- [EXTERNAL_DOWNLOADS]: Downloads generated image assets from the WaveSpeed AI API results endpoint.
- [SAFE]: Sensitive information like the API key is managed through environment variables (WAVESPEED_KEY), avoiding the risk of hardcoded credentials.
- [SAFE]: The skill implements content safety guardrails by defining a set of disabled scenes to prevent the generation of high-risk or inappropriate content.
Audit Metadata