pixeltamer
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The dispatcher script (
scripts/pixeltamer) orchestrates image generation by executing localized sibling Python and shell scripts (pixeltamer_api.py,pixeltamer_codex.sh,pixeltamer_codex_oauth.py) to interact with different backend services. - [PRIVILEGE_ESCALATION]: The skill includes a self-healing function within the dispatcher that applies executable permissions (
chmod +x) to its helper scripts. This is a standard maintenance feature designed to resolve common file-system permission issues occurring in AI agent environments. - [EXTERNAL_DOWNLOADS]: The
doctordiagnostic command performs network requests to GitHub (api.github.com) and the npm registry to check for available updates for the skill and its required tools. These requests target well-known, trusted services. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes user-supplied text to generate images. This risk is inherent to image generation tools and is mitigated by the skill's explicit instructions for the AI agent to visually verify the resulting images for accuracy and safety.
Audit Metadata