imagegen-batch@1.5.1
VERIFIED· install onlyPublisher claims: "用 ImageGen 等文生图工具安全地批量生成多张图片，避免并行同名覆盖，并规范命名归档。 当用户需要一次生成 2 张以上图片、批量配图/插图、封面+多张内图、同风格系列图时使用。 核心规则：提示词开头加唯一前缀防覆盖、量水印优先 --auto-crop 自动量测、生成后 mv 重命名并写 manifest、交付前数量核对+裁水印。 留白相框属**可选项**，默认不做，仅当用户明确要求「留白边 / 相框感」时才加； 人物给足标识包防塌脸、批量默认顺序发、失败按 5/15/45s 退避重发、单张重出默认最多 4 版（用户可指定）。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-14 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
No findings across 1,226 lines in 7 files.
Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.