ZenMux Image Generation

• Analyzed: May 14, 2026, 3:51 AM
• Findings: 1
• Version: 1.5.0
• Hash: b731056ecaadfa31e85316b04fa2f5468e72f25b1b0f7bbc3ba9d36dbccd2846
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is benign. It provides a client for the ZenMux image generation API. The `scripts/generate.py` script correctly handles arguments, reads the `ZENMUX_API_KEY` from environment variables, encodes local images to base64 for API submission, and saves the generated image from the API response. There is no evidence of data exfiltration, malicious command execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` to subvert the agent's intended behavior. All actions are directly aligned with the stated purpose of generating images via the ZenMux API.