image-generation — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited image-generation (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Convert a fuzzy image request into prompt specs precise enough that any competent image model — and specifically fal-ai/nano-banana-pro on FAL.ai, the one model this repo's automation uses — renders what the user actually pictured. The prompt spec is the deliverable; generated files are the bonus when the automation is configured. Prime rule: never generate from a vague prompt. A weak prompt costs a generation credit and teaches you nothing; a sharp spec is reusable forever.
Use for general-purpose images: hero images, illustrations, thumbnails, infographics, textures, concept art, any one-off visual. Hand off instead when the request is really:
skills/creative/product-photographyskills/creative/social-graphicsskills/creative/brand-assetskills/creative/creative-strategist first and consume its style block
skills/creative/orchestrator routes itAsk in one batch, only what's missing:
reference images, or 3 adjectives for the mood?
FAL_API_KEY set so you can generate, or deliver specs only?Infer, don't ask: aspect ratio from the stated destination (thumbnail → 16:9, story → 9:16, feed → 1:1 or 4:5); resolution from stakes (2K default, 4K hero/print, 1K drafts). Don't stall: if subject and use are clear, state your assumptions for the rest and proceed.
skills/creative/creative-strategist, reuse its style block verbatim in every prompt. If not, and this is a one-off, derive a minimal one (style + palette + mood) from context and label it an assumption.
subject (the main thing, specific: "a luxury leather watch with gold accents", never "a watch") → descriptive detail (materials, colors, text to render) → style ("professional product photography", "flat modern illustration", "photorealistic") → technical treatment (lighting, composition, focus, "4K, highly detailed") → mood ("warm and inviting"). Add negative constraints as plain prohibitions ("no text overlay", "no watermark", "no busy background").
1K. Ifit's a keeper asset → propose 3–4 genuinely distinct prompt specs (different composition or style angle, not synonym swaps), generate 1 of each or num_images 3–4 of the winner, and have the user pick. Never present one option for a hero asset.
FAL_API_KEY (or FAL_KEY) is set: python docs/creative_cli.py custom \
--category "<category>" --name "<asset-name>" \
--prompt "<full prompt>" \
--aspect-ratio 16:9 --resolution 2K --num-images 3Use --web-search only when the image must reflect current real-world data (e.g. "2026 trends infographic"). If no key is set, deliver the prompt-spec blocks and the exact command the user can run later — do not fake results or claim images were generated.
constraints. Fix misses by editing the prompt (more specific subject, explicit lighting, stronger prohibitions) — there are no other model knobs. One iteration round maximum before checking in with the user.
Read references/automation.md before writing any generation command — it has the full, verified parameter set, CLI flags, Python helpers, and output layout.
Deliver one block per asset (this exact structure, whether or not you generate):
## Prompt Spec — [asset name]
- **Use / destination:** [where it will live]
- **Subject:** [the main thing, concretely]
- **Style:** [artistic treatment]
- **Composition:** [framing — centered / rule of thirds / negative space / overhead]
- **Lighting:** [studio / natural golden hour / dramatic rim / high-key]
- **Mood:** [2–3 adjectives]
- **Aspect ratio:** [one of 21:9 16:9 3:2 4:3 5:4 1:1 4:5 3:4 2:3 9:16] · **Resolution:** [1K/2K/4K] · **Format:** [png/jpeg/webp]
- **Negative constraints:** [what must NOT appear]
- **Prompt (final, paste-ready):**
> [single flowing prompt assembled from the fields above]
- **Variants:** [n] — [what varies between them]
- **File naming:** assets/<category>/<asset-name>/<asset_name>_<n>_<timestamp>.png (automation default)
- **Generate with:** `python docs/creative_cli.py custom --category ... --name ... --prompt "..." --aspect-ratio ... --resolution ... --num-images n`If images were generated, append the saved paths under Results and say which variant you recommend and why (one line).
Before delivering, verify every spec:
1:1 "because default")references/automation.md; the model is always fal-ai/nano-banana-proHard don'ts: never claim an image was generated when it wasn't; never put brand color hex codes in quotes and hope — name the colors in words too ("deep navy #004E89"); never render paragraphs of text inside an image.
skills/creative/creative-strategist → feeds this skill its style block(paste into every prompt's style/mood/lighting fields).
skills/creative/product-photography, skills/creative/social-graphics,skills/creative/brand-asset → specialized front-ends that produce their own prompt specs and use the same automation; route there when the request fits.
skills/creative/product-video and skills/creative/remotion-script-writer →consume generated stills as source frames / assets.
references/automation.md — full FAL.ai client, CLI, and Python-helperreference. Read it whenever you're about to run a generation command.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.