anygen-image
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified during the analysis of the skill's code and instructions.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts and the
sessions_spawncapability to perform its tasks. These executions are scoped to the internal scripts provided with the skill. - [EXTERNAL_DOWNLOADS]: Fetches generated image assets and thumbnails from the verified vendor domain
www.anygen.io. - [DATA_EXFILTRATION]: User-specified prompts and reference files are transmitted to the AnyGen API at
www.anygen.io. This communication is integral to the skill's function and is restricted to the vendor's domain. - [CREDENTIALS_UNSAFE]: The skill securely stores the
ANYGEN_API_KEYin~/.config/anygen/config.jsonwith restricted0600permissions. Additionally, all API requests useallow_redirects=Falseto prevent potential credential leakage through redirects.
Audit Metadata