Security Audit

gemini-image-gen

github.com/openclaw/skills

AI SkillCommit 13146e6a3d46

TRUSTED

Scanned about 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

gemini-image-gen received a trust score of 76/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.

SkillShield's automated analysis identified 3 findings: 0 critical, 1 high, 1 medium, and 1 low severity. Key findings include Suspicious import: urllib.request, Node lockfile missing, Arbitrary File Read and Exfiltration via --edit flag.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

93%

Dependency Graph

98%

LLM Behavioral Safety

85%

Behavioral Risk Signals

Network Access

2 findings

Filesystem Write

2 findings

Excessive Permissions

1 finding

Security Findings3

Severity	Finding	Layer	Location
HIGH	Arbitrary File Read and Exfiltration via --edit flag The `load_image_as_base64` function, used when the `--edit` flag is provided, takes a user-controlled file path. This function reads the content of the specified file, base64 encodes it, and then sends it to the Google Gemini API. An attacker could provide a path to sensitive local files (e.g., `/etc/passwd`, `~/.ssh/id_rsa`, or other configuration files) if they can control the `--edit` argument, leading to data exfiltration to an external service (the Gemini API). Implement stricter validation for the `--edit` file path. Consider restricting file access to a designated, isolated directory, or requiring explicit user confirmation for paths outside expected image directories. Alternatively, implement a allowlist of file extensions and ensure the file is not a symbolic link to a sensitive location.	LLM	scripts/gen.py:100
MEDIUM	Suspicious import: urllib.request Import of 'urllib.request' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration.	Static	skills/iisweetheartii/gemini-image-gen/scripts/gen.py:20
LOW	Node lockfile missing package.json is present but no lockfile was found (package-lock.json, pnpm-lock.yaml, or yarn.lock). Commit a lockfile for deterministic dependency resolution.	Dependencies	skills/iisweetheartii/gemini-image-gen/package.json

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/5f7382767a0f99a5.svg)](https://skillshield.io/report/5f7382767a0f99a5)