Security audit
Security checks across malware telemetry and agentic risk
This skill is mostly an image-generation guide, but its included helper script can delete PNG images from the user's home folder without warning.
Review or remove scripts/flux-gen before installing or running it. In particular, delete the line that removes $HOME/*.png and restrict image discovery to a tool-owned output directory. Avoid blindly running the curl-to-sh install command; prefer a package manager or inspect the installer first.
import subprocess
def generate_image(prompt, model="x/flux2-klein:4b"):
result = subprocess.run(
["ollama", "run", model],
input=prompt,
capture_output=True,os.makedirs(output_dir, exist_ok=True)
result = subprocess.run(
["ollama", "run", model],
input=prompt,
capture_output=True,brew install ollama # Linux curl -fsSL https://ollama.com/install.sh | sh # Verify ollama --version
brew install ollama # Linux curl -fsSL https://ollama.com/install.sh | sh # Verify ollama --version
fi # Clean any old PNGs in common locations rm -f "$WORK_DIR"/*.png rm -f "$HOME"/*.png # Change to work dir
# Clean any old PNGs in common locations rm -f "$WORK_DIR"/*.png rm -f "$HOME"/*.png # Change to work dir cd "$WORK_DIR"
65/65 vendors flagged this skill as clean.