threejs-image-generator
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill utilizes the Google Gemini API, which is a trusted service for image generation. It adheres to security best practices by using environment variables or command-line flags for API keys rather than hardcoding credentials.
- [COMMAND_EXECUTION]: The skill's primary function involves running a local Python script using 'uv run'. It also provides a shell command to source environment profiles to ensure API keys are accessible, which is a standard procedure for developer tools.
- [EXTERNAL_DOWNLOADS]: The skill relies on official, versioned Python packages (google-genai and pillow) and utilizes the 'uv' execution tool which may fetch these dependencies from standard package registries.
Audit Metadata