god-tibo-imagen
Fail
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill is configured to read and verify the authentication file ~/.codex/auth.json, which contains sensitive tokens for accessing Codex/ChatGPT services.- [EXTERNAL_DOWNLOADS]: The documentation instructs users to install packages from public registries and third-party GitHub repositories, such as npm install god-tibo-imagen and npx skills add https://github.com/akillness/jeo-skills.- [REMOTE_CODE_EXECUTION]: Installation and usage of the skill involve executing code downloaded from non-standard and unverified sources.- [DATA_EXFILTRATION]: By accessing local credential files and having network access capabilities, the skill establishes a potential path for sensitive data to be transmitted externally.- [COMMAND_EXECUTION]: The skill provides and encourages the use of a custom CLI command gti to interact with its services.
Recommendations
- AI detected serious security threats
Audit Metadata