openai-image-gen
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs image generation via the official OpenAI API. All network communication is directed to well-known OpenAI endpoints.\n- [SAFE]: The script implements proper output sanitization in
write_gallery. Prompt strings and filenames are escaped usinghtml.escapebefore being rendered into the HTML gallery, effectively preventing stored Cross-Site Scripting (XSS) vulnerabilities.\n- [SAFE]: The skill fetches generated image files from OpenAI's storage URLs. This is the intended primary purpose of the skill and targets a well-known service.\n- [SAFE]: Access to the OpenAI API is managed through theOPENAI_API_KEYenvironment variable. No secrets or API keys are hardcoded in the source code.
Audit Metadata