openai-image-gen
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script downloads generated image files from OpenAI's official API endpoints using
urllib.request.urlretrieve. These operations are a core part of the skill's functionality and utilize well-known, trusted infrastructure. - [DATA_EXFILTRATION]: The skill handles the
OPENAI_API_KEYenvironment variable to authenticate requests to the official OpenAI API endpoint. No other sensitive data is accessed or transmitted to external domains. - [COMMAND_EXECUTION]: The documentation suggests the use of the
opencommand for viewing the generated gallery, but the script itself does not perform any autonomous command execution or subprocess spawning.
Audit Metadata