openai-image-gen

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs image generation via the official OpenAI API. All network communication is directed to well-known OpenAI endpoints.\n- [SAFE]: The script implements proper output sanitization in write_gallery. Prompt strings and filenames are escaped using html.escape before being rendered into the HTML gallery, effectively preventing stored Cross-Site Scripting (XSS) vulnerabilities.\n- [SAFE]: The skill fetches generated image files from OpenAI's storage URLs. This is the intended primary purpose of the skill and targets a well-known service.\n- [SAFE]: Access to the OpenAI API is managed through the OPENAI_API_KEY environment variable. No secrets or API keys are hardcoded in the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 02:37 AM