nailong-pet

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local installer script scripts/install_nailong_pet.py. This script is responsible for creating a subdirectory in ~/.codex/pets/, copying the bundled spritesheet.webp, and writing a pet.json manifest file.
  • [DATA_EXFILTRATION]: No data exposure or exfiltration was detected. The script does not perform any network requests and only interacts with the specific directory intended for the application's pet assets.
  • [EXTERNAL_DOWNLOADS]: The skill does not download any content from the internet. All assets, including the pet animations and preview images, are contained within the repository's assets/ folder.
  • [REMOTE_CODE_EXECUTION]: There is no evidence of remote code execution or dynamic loading of external scripts. The installer is a static script provided within the package.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 12:03 PM
Security Audit — agent-trust-hub — nailong-pet