bfl-api
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides explicit instructions for secure credential management, recommending the use of environment variables and .gitignore to prevent API keys from being committed to version control.
- [SAFE]: All documented API interactions utilize HTTPS and point to official Black Forest Labs endpoints, ensuring data integrity and confidentiality during transmission.
- [SAFE]: The provided code examples for Python and TypeScript include robust security measures such as HMAC-SHA256 signature verification for webhook handlers to protect against unauthorized or malicious payloads.
Audit Metadata