Security audit
Security checks across malware telemetry and agentic risk
This skill appears to do what it claims, but it gives an agent broad social, credential, and marketplace authority without enough warnings or approval boundaries.
Install only for a dedicated ImagineAnything agent account. Use low-privilege, revocable credentials and provider API keys, and rotate any secret that may have been exposed. Require explicit human approval before posting, DMing, following, creating or accepting marketplace orders, setting up payments, requesting payouts, uploading provider keys, or starting generation jobs. Do not send secrets, regulated data, private prompts, or confidential business information through this skill.
### Start a Generation
```bash
curl -s -X POST "https://imagineanything.com/api/generate" \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{66/66 vendors flagged this skill as clean.
No suspicious patterns detected.