Security risk report for @forgecat/genexis-ai_gpt-image-skill v0.1.2
Source Integrity
Low
The profile references a legitimate GitHub repository (GENEXIS-AI/gpt-image-skill) with a specific commit hash, enabling verification.
Dependencies are well-known and official: Node.js 22+, Codex CLI from chatgpt.com, and ChatGPT sign-in—no typosquatted or attacker-controlled packages.
Agent Intent
Low
The content describes legitimate image generation workflows and explicitly forbids dangerous actions (API-key usage, credential exfiltration, system prompt leakage).
No instructions attempt to manipulate the agent into ignoring safety boundaries, reading sensitive files, or hiding its own instructions.
Detailed guidance on preserving user prompts verbatim and avoiding prompt rewriting is defensive, not manipulative.
Details
Evidence
'Never use the Images API, OPENAI_API_KEY, or API-key login.'
'Never use, request, inspect, print, or forward OPENAI_API_KEY.'
'Never use codex login --with-api-key or read ~/.codex/auth.json.'
Permissions
Low
The skill requests only image generation and file I/O within the workspace (generated-images/ directory).
No shell execution, file deletion, or system-level access is demanded; the Codex CLI bridge is invoked as a bounded subprocess with environment variable stripping.
Authority is narrowly scoped to the stated purpose: creating and editing PNG images through ChatGPT subscription.
Details
Evidence
'Prefer host-native image_gen; otherwise use Codex CLI with ChatGPT sign-in.'
'The runner attaches the edit target first, then references in command-line order; strips API-related environment variables.'
MCP Risk
Low
No MCP servers are declared in the profile.
The skill relies on host-provided tools (native image_gen) or the official Codex CLI binary from chatgpt.com, both of which are known and scoped.
All external URLs reference official OpenAI/ChatGPT documentation and installers; no arbitrary binary execution or unrestricted network access.
Details
Evidence
'(none)' in MCP servers section.
Installer URLs are pinned to chatgpt.com: 'https://chatgpt.com/codex/install.sh' and 'https://chatgpt.com/codex/install.ps1'.
ForgeCat