image-gen
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill performs its intended function of image generation using reputable third-party APIs and follows best practices for handling user input.
- [EXTERNAL_DOWNLOADS]: The skill fetches image data from well-known AI services (Pollinations AI and Hugging Face). These network operations are necessary for the skill's core functionality and target established domains.
- [COMMAND_EXECUTION]: The Python script (skill.py) and Bash wrapper (skill.sh) process command-line arguments to receive prompts. The logic is restricted to API interaction and file storage, with no exposure to shell injection or unauthorized command execution.
- [DATA_EXFILTRATION]: No sensitive local data or credentials are accessed. Network activity is limited to sending prompts to legitimate image generation endpoints and downloading the resulting files.
Audit Metadata