godot-asset-generator
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The scripts
pack-spritesheet.tsandprocess-sprite.tsutilizeDeno.Commandto execute the localmagick(ImageMagick) binary for image manipulation. The implementation uses the argument array format, which effectively prevents shell injection vulnerabilities. - [CREDENTIALS_UNSAFE] (SAFE): The skill documentation correctly guides users to provide sensitive API keys via environment variables (e.g.,
OPENAI_API_KEY), following security best practices. - [EXTERNAL_DOWNLOADS] (SAFE): Network access is restricted to communicating with established and documented image generation providers (OpenAI, Replicate, Fal.ai) as required for the skill's primary functionality.
Audit Metadata