meitu-stickers

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the meitu command-line utility to handle core tasks, including generating image grids, splitting grids into separate sticker files, and converting images to animated GIFs via video tasks. These operations are standard for the CLI's intended use.\n- [EXTERNAL_DOWNLOADS]: The skill references the official meitu-cli package from the NPM registry. This package is identified as a vendor resource for the 'meitu' platform and is necessary for the skill's operation.\n- [SAFE]: Access to sensitive files like ~/.meitu/credentials.json is requested and utilized for API authentication. This behavior is consistent with the Meitu CLI's requirement for managing access keys and is appropriately scoped in the skill's permission metadata.\n- [SAFE]: The skill incorporates user-provided text into image generation prompts. This represents a standard design pattern for image generation wrappers and, while it creates a surface for indirect prompt injection, it does not involve executing arbitrary code or performing unauthorized network operations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 06:53 AM