fal-platform
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [Data Exposure & Exfiltration] (SAFE): Network communication is limited to the official fal.ai API domain. No unauthorized exfiltration or exposure of sensitive files was detected. Credentials are managed locally via a setup script that stores the key in an environment file, which is a standard pattern for this type of tool.\n- [Dynamic Execution] (LOW): Shell scripts use Python heredocs to process JSON data. While this involves dynamic interpretation, the logic is self-contained, does not use unsafe execution functions like eval() on untrusted input, and is a routine method for parsing API responses.\n- [Unverifiable Dependencies & Remote Code Execution] (SAFE): The skill does not download external packages or execute remote scripts. It relies on standard system utilities such as curl, sed, and python3, and all API interactions are directed to trusted endpoints.
Audit Metadata