codex-pet
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with the vendor's own infrastructure (runcomfy.com and runcomfy.net) for image generation tasks using the RunComfy CLI.
- [SAFE]: Dependencies are restricted to standard, well-known tools like ImageMagick (
magick) and the author's own Node.js CLI tool (@runcomfy/cli). - [SAFE]: File system operations are confined to specific project directories and the local application path for custom pets (
~/.codex/pets/), following the documented integration pattern for the target software. - [SAFE]: Security practices are explicitly documented, such as the use of environment variables for tokens and JSON-based CLI inputs to prevent shell injection vulnerabilities.
Audit Metadata