godot-asset-generator

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION] (SAFE): The scripts pack-spritesheet.ts and process-sprite.ts utilize Deno.Command to execute the local magick (ImageMagick) binary for image manipulation. The implementation uses the argument array format, which effectively prevents shell injection vulnerabilities.
  • [CREDENTIALS_UNSAFE] (SAFE): The skill documentation correctly guides users to provide sensitive API keys via environment variables (e.g., OPENAI_API_KEY), following security best practices.
  • [EXTERNAL_DOWNLOADS] (SAFE): Network access is restricted to communicating with established and documented image generation providers (OpenAI, Replicate, Fal.ai) as required for the skill's primary functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 04:59 PM