gpt-image-2
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
codexCLI andpython3to interact with OpenAI's infrastructure and process session files. - The
scripts/gen.shscript invokescodex execwith the--enable image_generationflag to trigger image creation. - It performs a snapshot of the
~/.codex/sessionsdirectory to identify new rollout files, which it then processes using a Python script. - The
scripts/extract_image.pyscript includes safety checks to prevent writing the resulting image to sensitive system directories (e.g.,/etc,/bin,/var/root). - The logic is scoped to reading session files generated during the specific invocation, minimizing access to unrelated local data.
Audit Metadata