falimagegen

• Analyzed: May 12, 2026, 3:25 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3c5041227788daf19c9be1467fff120c8256e3fe18b701e7c47c4169141a1196
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with the fal.ai image generation API, which inherently involves making network requests and handling API keys. All instructions and code examples consistently direct the agent to use environment variables for API keys (e.g., `$FAL_KEY`, `process.env.FAL_KEY`) and to verify model schemas, promoting secure and correct usage. Network calls are exclusively directed to legitimate `fal.run` domains. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts to subvert the agent's intended purpose across `SKILL.md`, `agents/openai.yaml`, `references/fal-model-api-checklist.md`, and `references/fal-model-examples.md`.