meitu-stickers
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
meitucommand-line utility to handle core tasks, including generating image grids, splitting grids into separate sticker files, and converting images to animated GIFs via video tasks. These operations are standard for the CLI's intended use.\n- [EXTERNAL_DOWNLOADS]: The skill references the officialmeitu-clipackage from the NPM registry. This package is identified as a vendor resource for the 'meitu' platform and is necessary for the skill's operation.\n- [SAFE]: Access to sensitive files like~/.meitu/credentials.jsonis requested and utilized for API authentication. This behavior is consistent with the Meitu CLI's requirement for managing access keys and is appropriately scoped in the skill's permission metadata.\n- [SAFE]: The skill incorporates user-provided text into image generation prompts. This represents a standard design pattern for image generation wrappers and, while it creates a surface for indirect prompt injection, it does not involve executing arbitrary code or performing unauthorized network operations.
Audit Metadata