Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed image-generation and image-editing helper that sends prompts or images to Atlas Cloud or Google APIs as expected for its purpose.
Install only if you are comfortable sending image prompts and any selected images to Atlas Cloud or Google AI Studio using your own API key. Avoid using confidential, regulated, or highly personal images unless you explicitly intend to upload them to those services.
The trigger description is extremely broad, matching generic requests like creating thumbnails, banners, logos, product photos, or any visual asset. Over-broad routing can cause this skill to activate in contexts the user did not intend, leading to unnecessary third-party transmission of prompts or images and increasing the chance of accidental file upload or API-key-backed actions.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
3. If both are set → ask the user which provider to use
4. If neither is set → ask the user to configure one:
- **Atlas Cloud**: Sign up at https://www.atlascloud.ai, Console → API Keys → Create key, then `export ATLASCLOUD_API_KEY="your-key"`
- **Google AI Studio**: Get key from https://aistudio.google.com/apikey, then `export GEMINI_API_KEY="your-key"`
**Atlas Cloud**
- Async API with polling workflow
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
## Mode 2: Google AI Studio (Official)
### Setup
1. Get API key from https://aistudio.google.com/apikey
2. Set environment variable: `export GEMINI_API_KEY="your-key"`
### Text-to-Image Generation
The skill requires environment access and performs network operations, but it does not declare an explicit tool scope such as allowed tools or permissions. This weakens isolation and reviewability because an agent may invoke networked behavior without a narrowly declared boundary, increasing the chance of unintended API use or data egress.
This instruction sends user prompts to Atlas Cloud over the network, which is an external data transfer. In this skill context that is expected functionality, but it is still security-relevant because user content and API-authenticated requests leave the local environment and are handled by a third party.
# Step 1: Submit generation request
curl -s -X POST "https://api.atlascloud.ai/api/v1/model/generateImage" \
-H "Authorization: Bearer $ATLASCLOUD_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This instruction sends user prompts to Atlas Cloud over the network, which is an external data transfer. In this skill context that is expected functionality, but it is still security-relevant because user content and API-authenticated requests leave the local environment and are handled by a third party.
# Step 1: Submit generation request
curl -s -X POST "https://api.atlascloud.ai/api/v1/model/generateImage" \
-H "Authorization: Bearer $ATLASCLOUD_API_KEY" \
-H "Content-Type: application/json" \
-d '{
This step uploads a local file to Atlas Cloud, creating a direct exfiltration path for local image data. Although the skill explicitly says the agent must ask for confirmation first, the capability is inherently sensitive because a mistaken or overly eager invocation could disclose local files to a third party.
To use local images for editing, first upload them to get a URL. The agent MUST confirm with the user before uploading any local file (e.g., "I'll upload /path/to/image.jpg to Atlas Cloud for editing. Proceed?").
curl -s -X POST "https://api.atlascloud.ai/api/v1/model/uploadMedia" \
-H "Authorization: Bearer $ATLASCLOUD_API_KEY" \
-F "file=@/path/to/local/image.jpg"
# Returns: { "code": 200, "data": { "download_url": "https://...url...", "filename": "image.jpg", "size": 123456 } }
The editing workflow submits prompts and referenced image URLs to Atlas Cloud, which creates an external data exposure point. In context this is part of the skill's purpose, but if source images contain sensitive content, the skill enables transmission to a third party and should therefore be treated as a real data-egress risk.
| resolution | string | No | 1k | 1k, 2k, 4k |
curl -s -X POST "https://api.atlascloud.ai/api/v1/model/generateImage" \
-H "Authorization: Bearer $ATLASCLOUD_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The editing workflow submits prompts and referenced image URLs to Atlas Cloud, which creates an external data exposure point. In context this is part of the skill's purpose, but if source images contain sensitive content, the skill enables transmission to a third party and should therefore be treated as a real data-egress risk.
| resolution | string | No | 1k | 1k, 2k, 4k |
curl -s -X POST "https://api.atlascloud.ai/api/v1/model/generateImage" \
-H "Authorization: Bearer $ATLASCLOUD_API_KEY" \
-H "Content-Type: application/json" \
-d '{
The Google AI Studio editing flow transmits prompts and base64-encoded image content to Google's API, making this a clear external transmission path. Because inline image data may contain sensitive local content, the risk is higher than a purely text-based request even though the behavior is documented.
Include the source image as base64 inline_data alongside the text prompt:
curl -s -X POST \
"https://generativelanguage.googleapis.com/v1beta/models/gemini-3.1-flash-image-preview:generateContent" \
-H "x-goog-api-key: $GEMINI_API_KEY" \
-H "Content-Type: application/json" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import urllib.error
import urllib.parse
API_BASE = "https://api.atlascloud.ai/api/v1"
GEMINI_API_BASE = "https://generativelanguage.googleapis.com/v1beta"
GEMINI_MODEL = "gemini-3.1-flash-image-preview"
UA = "AtlasCloud-Skill/1.0"
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import urllib.error
import urllib.parse
API_BASE = "https://api.atlascloud.ai/api/v1"
GEMINI_API_BASE = "https://generativelanguage.googleapis.com/v1beta"
GEMINI_MODEL = "gemini-3.1-flash-image-preview"
UA = "AtlasCloud-Skill/1.0"
No suspicious patterns detected.