openai-image-gen
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were identified in the skill. The logic follows standard practices for interacting with external APIs.\n- [DATA_EXFILTRATION]: The script accesses the
OPENAI_API_KEYenvironment variable and transmits it to the official OpenAI API endpoint (api.openai.com). This is the intended behavior for an image generation skill and targets a well-known service domain.\n- [EXTERNAL_DOWNLOADS]: The skill downloads the resulting image files from URLs returned by the OpenAI API. These downloads originate from well-known cloud infrastructure associated with OpenAI's service and do not involve executable code.\n- [COMMAND_EXECUTION]: The skill provides instructions for standard local execution of a Python script. The script itself uses built-in Python modules for network requests and file writing, with no evidence of privilege escalation or unsafe command spawning.
Audit Metadata