image-service
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs its functions using trusted third-party libraries including Httpx for networking, and Pillow and NumPy for image manipulation. These are industry-standard packages for these tasks.- [COMMAND_EXECUTION]: The script
scripts/research_image.pyautomates the generation of infographics by callingscripts/text_to_image.py. This is done safely viasubprocess.runwith an argument list, which prevents shell-related injection attacks.- [EXTERNAL_DOWNLOADS]: The skill is designed to interact with external APIs atapi.openai.comandllm.api.zyuncs.comto process image data. These network operations are intrinsic to the skill's purpose and do not involve downloading or executing untrusted code.- [DATA_EXFILTRATION]: Source code review shows that network activity is confined to standard API requests for image processing. There are no attempts to access or transmit sensitive system files, environment secrets, or user credentials.
Audit Metadata