codex-images

The documented workflow is coherent with batch image generation, and the stated Codex CLI install source is consistent with the purpose. The bundled executable script was not provided, preventing verification of its behavior; treat the skill as elevated supply-chain risk until that script is reviewed.

This is an image-generation batch wrapper, not evidence of embedded malware. Its primary security concern is running Codex with approval disabled and --sandbox danger-full-access while forwarding user-controlled prompts and inheriting process.env, which could permit prompt-directed actions or expose environment-held credentials through the child process. It also permits an arbitrary executable via --codex-bin and unrestricted output paths via --out. Severity is elevated when prompts, executable selection, or environment contents are untrusted; no suspicious domains or hardcoded credentials appear in the code.