openai-image-gen
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates with the official OpenAI API endpoint for image generation. It securely manages the API key by retrieving it from the environment and uses it only for authenticated requests to the trusted service.\n- [SAFE]: The code implements proper HTML escaping in the
write_galleryfunction to sanitize user-provided prompts and generated filenames. This prevents potential stored cross-site scripting (XSS) vulnerabilities in the output gallery.\n- [SAFE]: File system and network operations are restricted to their intended functions: creating an output directory, downloading images from the OpenAI API, and writing metadata and gallery files locally. These actions are transparent and consistent with the skill's stated purpose.
Audit Metadata