Scanned skills

bytedance/deer-flow image-generation

Checked the catalogued skill at image-generation.

SkillTrust corpus scan 8 November 2026 v0.13.0 via skillsh Verify on GitHub
A AI-triaged 0
A Security

A set by no findings on this axis

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

0 findings

No issues flagged by the static checks in the scanned files.

12 suppressed by AI triage
securityhigh SD-007 benign_example
scripts/generate.py

The script references a public image generation API endpoint, which is a legitimate outbound call.

securityhigh SD-007 benign_example
scripts/generate.py

The script references the OpenAI API, a legitimate outbound call.

securityhigh SD-007 benign_example
scripts/generate.py

The code sends a request to a public image generation service, which is benign.

securitymedium SD-008 benign_example
scripts/generate.py

Base64 decoding is used to handle image data returned from a trusted API.

securityhigh SD-007 benign_example
scripts/generate.py

The script calls the Gemini image generation endpoint, a legitimate external service.

securityhigh SD-007 benign_example
scripts/generate.py

The URL points to a Google generative language API, which is a legitimate outbound call.

securitymedium SD-008 benign_example
scripts/generate.py

Base64 decoding is used to write image data returned from the Gemini API.

securitymedium SD-008 benign_example
scripts/generate.py

The function decodes base64 image data received from a trusted provider.

securitymedium SD-008 benign_example
scripts/generate.py

Decoding base64 from a data URL returned by OpenAI is a standard, benign operation.

securityhigh SD-007 benign_example
scripts/generate.py

The request to fetch an image URL from OpenAI is a legitimate outbound call.

securityhigh SD-007 benign_example
scripts/generate.py

The code posts data to the configured URL, a legitimate outbound call.

securityhigh SD-007 benign_example
scripts/generate.py

The code performs a standard request to the configured endpoint, which is benign.