Oathe Security Badge

Is mexicanamerican/xai-image-gen safe?

Yes. mexicanamerican/xai-image-gen is safe to install. Oathe's behavioral security audit gave the xai-image-gen skill by mexicanamerican a trust score of 92/100 with 2 findings, none critical or high. Report updated

https://github.com/openclaw/skills/tree/main/skills/mexicanamerican/xai-image-gen

92
SAFE

Is mexicanamerican/xai-image-gen safe to install?

This is a legitimate image generation skill using xAI's official API with proper documentation and standard dependencies. Minor concerns around system file access during installation appear to be benign system operations rather than malicious behavior.

What security issues were found in mexicanamerican/xai-image-gen?

Category Scores

Prompt Injection 98/100 · 30%
Data Exfiltration 88/100 · 25%
Code Execution 96/100 · 20%
Clone Behavior 98/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 95/100 · 5%

Findings (2)

LOW System file access during installation -12 ▶

Monitoring detected access to sensitive system files including .env, SSH keys, AWS credentials, and Docker config. However, these appear to be system-level operations during SSH connections and sudo commands rather than skill-initiated access.

INFO Executable test script present -4 ▶

The skill includes a test.sh script with execute permissions. Review shows it contains legitimate testing functionality that checks API connectivity and cleans up test files.

Should I install mexicanamerican/xai-image-gen?

Oathe's verdict for mexicanamerican/xai-image-gen is SAFE with a trust score of 92/100. Recommendation: Install.