tensorart-generate
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
list_tools.py,create_task.py,query_task.py,upload_file.py,download_result.py) to communicate with the TensorArt OpenAPI. - [EXTERNAL_DOWNLOADS]: Utilizes
download_result.pyto fetch generated image and video assets from URLs provided by the API and save them to the local filesystem. - [DATA_EXFILTRATION]: Includes
upload_file.pywhich reads local files and uploads them to the vendor's storage (Cloudflare R2 via TensorArt API) as part of the image generation workflow. - [SAFE]: All network communications are directed to vendor-owned domains (
openapi.tensor.art,openapi.tusiart.cn) or well-known infrastructure (Cloudflare), and the local storage of the API key in~/.tensor_access_keyfollows standard secret management practices for this service.
Audit Metadata