codex-image-gallery
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill starts a local web server and performs status checks using Node.js and standard shell utilities like
pgrep. - [SAFE]: The server implementation in
scripts/server.mjsusespath.resolveandstartsWithto prevent directory traversal attacks when serving images. - [SAFE]: The web server binds to
127.0.0.1by default, preventing external access to the local image files.
Audit Metadata