Security audit
Security checks for vulnerabilities and agentic risk
This skill mostly matches its Gemini image-generation purpose, but it includes undocumented request-shaping options that should be reviewed before installation.
Install only if you are comfortable with Codex running this local shell script to send prompts and selected image files to a Gemini-compatible endpoint. Prefer a local proxy for key isolation, review the undocumented --system/--system-file behavior before use, and avoid broad retries or batch generation unless you explicitly intend the extra API calls and possible cost.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Referenced artifact was not completely inspected
Use `./scripts/gemini-image.sh` for Gemini native image generation. Prefer this bundled script over writing one-off curl commands.
Skill selects an external model or provider that may use a different account or billing plan than the operator expects. Undisclosed model switches can cause unexpected cost or quota consumption.
Use a faster model:
./scripts/gemini-image.sh "画两只小猫在打闹" --model gemini-2.5-flash-image
Force Google official endpoint:
The skill instructs the agent to invoke a local shell script that can make network requests, but the skill metadata does not declare any tool scope or allowed-tools boundaries. This increases the chance of the skill being invoked with broader-than-necessary execution privileges and reduces enforceable policy controls around shell and network use.
The description is broad enough to match many generic image-generation, curl-debugging, or troubleshooting requests, which can cause the skill to activate outside a narrowly intended context. Over-broad activation is dangerous because it can route ordinary requests into a shell-and-network-capable workflow, expanding attack surface and increasing the chance of unintended external calls or cost-incurring actions.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
section "Curl"
printf '```bash\n' >&2
printf ' curl -sS \\\n' >&2
printf ' --connect-timeout %s \\\n' "$connect_timeout" >&2
if [[ "$max_time" != "0" ]]; then
printf ' --max-time %s \\\n' "$max_time" >&2
The help text omits implemented options such as --system, --system-file, --mime, and --image-mime, even though they materially affect request construction and model behavior. This mismatch creates a transparency and trust problem: reviewers, users, and calling agents may rely on the documented interface while the script supports hidden capabilities that alter prompts or file handling semantics.
The script implements hidden --system and --system-file options that inject a systemInstruction into the outbound model request, but these controls are omitted from the documented help text and skill description. Undocumented instruction-shaping features materially change model behavior and can be abused to bypass expected user-facing constraints, making the tool capable of covert prompt steering beyond ordinary image generation/editing.
No suspicious patterns detected.