acestep-thumbnail
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash scripts to manage configuration and execute API requests. It uses
curlto interact with official Google API endpoints andjqfor JSON processing. These operations are standard for the skill's purpose. - [DATA_EXPOSURE]: The skill explicitly includes security measures to prevent accidental exposure of the user's Gemini API key. It masks the key with
***during configuration listing and provides a dedicated check command that only reports the key's status without revealing its content. - [EXTERNAL_DOWNLOADS]: Communicates with official Google Gemini API endpoints (
https://generativelanguage.googleapis.com) to generate image content based on user prompts.
Audit Metadata