codex-image — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited codex-image (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate an image by delegating to the ask-codex MCP tool with a prompt-engineered template that triggers Codex's built-in image_generation tool. The result is saved to disk and the path is returned to the user.
codex-cli >= 0.125.0 installed and authenticatedimage_generation feature flag enabled (default: stable + true). Verify with codex features list | grep image_generationask-codex MCP tool available (from ask-codex-mcp or the ask-llm-mcp orchestrator)Take the user's natural-language ask and prepare it for image generation. Rules:
If you significantly enrich the prompt, briefly tell the user what you added and let them push back before dispatching.
Convention:
/tmp/codex-images/$(date +%Y-%m-%d)/<slug>.png where <slug> is a short kebab-case derivation from the user's prompt (max 40 chars).mkdir -p <parent> before dispatching. Codex's image tool will fail if the directory doesn't exist.Example slug derivation:
dark-terminal-with-two-reviewers.pngcat-picture.pngCall the ask-codex MCP tool (NOT raw codex exec — that bypasses ADR-044 quota fallback, ADR-042 stdin handling, and ADR-047 PATH resolution). Use this prompt template:
Use your image_generation tool to create the following image and save it as a PNG file.
Image description:
<the user's prompt, refined per Phase 1>
Save the file to this absolute path: <path from Phase 2>
After saving, confirm the absolute path of the created file and its byte size in your reply. If image_generation fails or the file cannot be written, explain what went wrong and do not invent a fake path.Default model: let ask-codex use its default (gpt-5.5, per ADR-067). The image_generation tool is invoked by the model regardless of which Codex chat model is selected — model selection here is about the orchestrating agent, not the image model itself.
Wall time expectation: image generation typically takes 2–6 minutes end-to-end (Codex orchestration + OpenAI server-side image render + tool reply). This is normal; do not retry assuming a hang. The first call in a session is slowest because the image_generation tool definitions aren't cached yet; subsequent calls in the same session are faster (Codex CLI prompt-caches aggressively).
After ask-codex returns:
codex features list | grep image_generation shows false. Tell the user to enable it: codex features enable image_generation or codex --enable image_generation [PROMPT].codex --version < 0.125.0. Tell the user to update: npm i -g @openai/codex (or whichever install method they use).outputPath.User: /codex-image generate a minimalist illustration of a cat reading a book
Phase 1 — refined prompt: minimalist illustration of a cat reading a book, flat vector style, two-tone palette, no human figures, square framing, transparent background
Phase 2 — output: /tmp/codex-images/2026-04-24/cat-reading-a-book.png
Phase 3 — ask-codex is called with the prompt template above.
Phase 4 — ls -la /tmp/codex-images/2026-04-24/cat-reading-a-book.png shows a 248KB file. Skill returns:
Generated /tmp/codex-images/2026-04-24/cat-reading-a-book.png (248 KB) via gpt-image-1. Used Codex (gpt-5.5) as orchestrator. Refined prompt: minimalist illustration of a cat reading a book, flat vector style, two-tone palette, no human figures, square framing, transparent background. Reading inline below.
[image renders]
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.