nailong-pet
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local installer script
scripts/install_nailong_pet.py. This script is responsible for creating a subdirectory in~/.codex/pets/, copying the bundledspritesheet.webp, and writing apet.jsonmanifest file. - [DATA_EXFILTRATION]: No data exposure or exfiltration was detected. The script does not perform any network requests and only interacts with the specific directory intended for the application's pet assets.
- [EXTERNAL_DOWNLOADS]: The skill does not download any content from the internet. All assets, including the pet animations and preview images, are contained within the repository's
assets/folder. - [REMOTE_CODE_EXECUTION]: There is no evidence of remote code execution or dynamic loading of external scripts. The installer is a static script provided within the package.
Audit Metadata