codex-pet
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous shell command examples that involve local file system operations (creating directories, moving files) and the use of the
runcomfyandmagickCLI tools to process image data. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of external tools, specifically the
@runcomfy/clivia npm and the ImageMagick suite via system-level package managers. It also accepts user-provided external image URLs which are processed by the RunComfy API. - [SAFE]: The skill's operations are transparent and consistent with its stated utility of creating custom desktop pet assets. Security considerations regarding token storage and input boundaries are acknowledged in the documentation, and the file access patterns (e.g., ~/.codex/pets) are appropriate for the application's context.
Audit Metadata