flux-image
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
infshCLI tool for image generation tasks. It implements theallowed-toolsconstraint to limit the agent's shell access specifically toinfshcommands, reducing the attack surface. - [EXTERNAL_DOWNLOADS]: The skill references installation instructions and related skills hosted on GitHub (
inference-sh/skills). These references are informative and point to the official repository of the service being integrated. - [DATA_EXFILTRATION]: The skill processes user-supplied prompts and image URLs for text-to-image and image-to-image tasks. This data ingestion is restricted to the parameters of the
infshcommand and does not involve accessing sensitive local files or environment variables.
Audit Metadata