oathe
Oathe Security Badge

Is zhangsiyuan123123/image-generate safe?

Yes. zhangsiyuan123123/image-generate is safe to install. Oathe's behavioral security audit gave the image-generate skill by zhangsiyuan123123 a trust score of 92/100 with 3 findings, none critical or high. Report updated

https://clawhub.ai/zhangsiyuan123123/image-generate

92
SAFE

Is zhangsiyuan123123/image-generate safe to install?

This is a legitimate image generation skill that uses the Volcano Engine API to create images from text prompts. The code is straightforward, performs only its stated functionality, and shows no signs of malicious behavior or security vulnerabilities.

What security issues were found in zhangsiyuan123123/image-generate?

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 90/100 · 25%
Code Execution 85/100 · 20%
Clone Behavior 95/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 90/100 · 5%

Findings (3)

LOW Contains executable Python code -10 ▶

The skill includes a Python script that executes to generate images, which is expected functionality but represents executable code in the system

INFO Reads environment variables for API keys -5 ▶

Script reads MODEL_IMAGE_API_KEY, ARK_API_KEY, VOLCENGINE_ACCESS_KEY, and VOLCENGINE_SECRET_KEY from environment, which is standard practice for API authentication

INFO External API dependency -5 ▶

Skill depends on Volcano Engine (ByteDance) external API service for image generation functionality

Should I install zhangsiyuan123123/image-generate?

Oathe's verdict for zhangsiyuan123123/image-generate is SAFE with a trust score of 92/100. Recommendation: Install.