Skills
Navigate
skills/cskwork/skills/image-first-ui/Gen Agent Trust Hub

image-first-ui

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates secure coding practices, such as validating output paths in scripts/extract_image.py to prevent overwriting critical system files.
  • [COMMAND_EXECUTION]: The skill interfaces with the codex CLI and internal scripts using subprocess.run and standard shell execution. These operations are performed using list-based arguments, avoiding shell injection vulnerabilities.
  • [DATA_EXPOSURE]: The script scripts/extract_image.py accesses ~/.codex/sessions to retrieve images generated during the session. This is a local operation required for the skill's intended purpose and does not involve exfiltration to external entities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 02:21 PM