generate-story
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads AI-generated images and videos from Replicate and OpenAI official APIs to the temporary directory (
/tmp) for local processing. - [COMMAND_EXECUTION]: The orchestration scripts use
subprocess.runto invokeffmpegfor video encoding andcurlfor uploading content to the story API. - [SAFE]: Sensitive API tokens for Replicate, OpenAI, and the Story API are correctly managed through environment variables or a local configuration file (
~/.config/secrets/codex.env), ensuring they are not hardcoded within the skill.
Audit Metadata