Oathe Security Badge

Is pfrederiksen/grok-imagine-image-pro safe?

https://github.com/pfrederiksen/grok-imagine-image-pro

95
SAFE

This is a legitimate image generation skill that provides a clean wrapper around xAI's Grok/Flux API. The skill properly declares its dependencies, contains only expected functionality for image generation and file handling, and shows no evidence of malicious behavior during installation or operation.

Category Scores

Prompt Injection 95/100 · 30%
Data Exfiltration 95/100 · 25%
Code Execution 90/100 · 20%
Clone Behavior 100/100 · 10%
Canary Integrity 100/100 · 10%
Behavioral Reasoning 92/100 · 5%

Findings (2)

LOW Contains executable shell commands -10

The skill includes bash and python commands for API integration, but these are instructional and legitimate

INFO API key dependency -8

Skill requires XAI_API_KEY which could incur costs, but this is expected for image generation services