remove-image-watermark

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and executes the official @pilio/cli package from the NPM registry using pnpm dlx to interact with the vendor's API.
  • [COMMAND_EXECUTION]: Executes shell commands to perform image processing tasks and poll for asynchronous task status via the Pilio CLI.
  • [CREDENTIALS_UNSAFE]: References the PILIO_API_KEY environment variable for authentication. The skill explicitly instructs the agent not to prompt the user for the key and to avoid leaking it in result URLs, which is consistent with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 05:18 AM