codex-imagegen
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
codex-imagegen.shexecutes shell commands to manage file directories and move generated images to the user-specified destination. - [COMMAND_EXECUTION]: The skill invokes either a Node.js companion script found in the plugin cache or the
codexCLI tool to perform the image generation task. - [EXTERNAL_DOWNLOADS]: The documentation references the installation of the official OpenAI Codex CLI (
@openai/codex) and thecodex-plugin-ccrepository from a trusted organization. - [PRIVILEGE_ESCALATION]: The instructions advise the agent to run the script with
dangerouslyDisableSandbox: truespecifically to allow the Codex tool to access the network for OpenAI API calls.
Audit Metadata