pixeltamer
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill employs a central bash dispatcher (
scripts/pixeltamer) to orchestrate the execution of specialized Python, Node.js, and bash scripts for image generation and verification. - [DATA_EXPOSURE]: To facilitate authentication with the target services, the skill reads local credential files such as
~/.codex/auth.jsonand.envfiles. This data is handled by the skill's own client implementations for the intended service only. - [PRIVILEGE_ESCALATION]: The dispatcher script includes logic to ensure that bundled helper scripts have the necessary execution permissions (
chmod +x), which is a common requirement for agent skills installed through shims. - [EXTERNAL_DOWNLOADS]: The
pixeltamer doctorcommand performs version checks by querying the GitHub API and npm registry, which are trusted domains. - [PROMPT_INJECTION]: The skill provides extensive documentation and templates for generating high-quality images. These prompts focus on creative output and do not contain instructions aimed at overriding agent behavior or bypassing safety filters.
Audit Metadata