Security audit
Security checks across malware telemetry and agentic risk
This is a coherent illustration skill with disclosed network, backend, config, and character-pack behavior that users should understand before use.
Install this only if you are comfortable with an illustration skill that can call external image services or your logged-in Codex/Grok CLI, write generated images and local character-pack files, and send prompts/reference images to those backends. Review community packs before installing them and use paid fallback only when you intend to incur charges.
started, exclude=pre_existing, thread_id=thread_id)
try:
proc = subprocess.run(cmd, input=stdin_prompt, capture_output=True,
text=True, timeout=CODEX_EXEC_TIMEOUT)
except subprocess.TimeoutExpired as e:
produced = produced_image(e.stdout)pass
started = time.time()
try:
proc = subprocess.run(cmd, capture_output=True, text=True,
timeout=GROK_EXEC_TIMEOUT)
except subprocess.TimeoutExpired:
raise BackendUnavailable("grok exec timed out before producing an image.")f"resulting image to {out} (overwrite if it exists). Do not "
f"construct the image with code (HTML/SVG/Python) — use the "
f"image generation tool. Do not ask for confirmation.")
# Confine the auto-approved agent: --sandbox workspace lets it write only to
# CWD/tmp/~/.grok (network stays open for the image call), so an instruction
# injected via the prompt content can't reach the wider filesystem. Grok's
# sandbox is OFF by default, so this must be explicit — the analog of thestarted, exclude=pre_existing, thread_id=thread_id)
try:
proc = subprocess.run(cmd, input=stdin_prompt, capture_output=True,
text=True, timeout=CODEX_EXEC_TIMEOUT)
except subprocess.TimeoutExpired as e:
produced = produced_image(e.stdout)pass
started = time.time()
try:
proc = subprocess.run(cmd, capture_output=True, text=True,
timeout=GROK_EXEC_TIMEOUT)
except subprocess.TimeoutExpired:
raise BackendUnavailable("grok exec timed out before producing an image.")local = pack_name(args.as_name) if args.as_name else name
dest = config_dir() / "characters" / local
if (dest / "character.md").exists() and not args.force:
sys.exit(f"{dest} already exists — use --force to overwrite or --as <name> to rename")
repo = packs_repo(args)
entry = repo_index(args, optional=True).get(name) # version stamp is best-effort
install_pack_files(repo, name, dest)64/64 vendors flagged this skill as clean.
No suspicious patterns detected.