Codex Pet Skill 安全审计

92931. **RunComfy CLI** — `npm i -g @runcomfy/cli`942. **RunComfy account** — `runcomfy login`. CI alternative: `RUNCOMFY_TOKEN=<token>`.953. **ImageMagick** — `brew install imagemagick` (macOS) or `apt-get install imagemagick` (Linux). Provides the `magick` command for the deterministic atlas assembly.964. **A source image URL** — publicly fetchable HTTPS, JPEG/PNG/WebP, the subject the Codex Pet will be modeled on.

9091## Prerequisites92931. **RunComfy CLI** — `npm i -g @runcomfy/cli`942. **RunComfy account** — `runcomfy login`. CI alternative: `RUNCOMFY_TOKEN=<token>`.953. **ImageMagick** — `brew install imagemagick` (macOS) or `apt-get install imagemagick` (Linux). Provides the `magick` command for the deterministic atlas assembly.964. **A source image URL** — publicly fetchable HTTPS, JPEG/PNG/WebP, the subject the Codex Pet will be modeled on.

343- **Input boundary**: Codex Pet prompts are passed as JSON via `--input`. The CLI does NOT shell-expand. No shell-injection surface.344- **Third-party content**: source image URL is fetched by the RunComfy server. Treat external URLs as untrusted — image-based prompt injection is a known risk for any image-edit model.345- **Outbound endpoints**: only `model-api.runcomfy.net` and `*.runcomfy.net` / `*.runcomfy.com`.346- **Generated-file size cap**: the CLI aborts any single Codex Pet canonical download > 2 GiB.

931. **RunComfy CLI** — `npm i -g @runcomfy/cli`942. **RunComfy account** — `runcomfy login`. CI alternative: `RUNCOMFY_TOKEN=<token>`.953. **ImageMagick** — `brew install imagemagick` (macOS) or `apt-get install imagemagick` (Linux). Provides the `magick` command for the deterministic atlas assembly.964. **A source image URL** — publicly fetchable HTTPS, JPEG/PNG/WebP, the subject the Codex Pet will be modeled on.97

118119runcomfy run openai/gpt-image-2/edit \120  --input "{121    \"prompt\": \"Generate one canonical Codex digital pet sprite based on the input image. EXAGGERATED chibi proportions: the head occupies about 60 percent of the total figure height; body and legs are tiny stubby and short. The whole pet figure must fit within a near-square bounding box (overall aspect close to 1:1). Pixel-art-adjacent low-resolution mascot, chunky whole-body silhouette, thick dark 1-2 px outline, visible stepped pixel edges, limited palette, flat cel shading, simple expressive face, tiny limbs. Centered in the image. No polished illustration, no painterly render, no anime key art, no 3D render, no glossy app-icon polish, no realistic detail. Background: solid flat magenta ${CHROMA} chroma-key fill outside the pet silhouette. The pet itself must not use the chroma-key color or any close-to-magenta highlights. No gradients, no shadows, no halos, no scenery, no text. Identity preserved from the input image.\",122    \"images\": [\"${SOURCE_URL}\"],123    \"size\": \"1024*1024\"124  }" \125  --output-dir "${RUN_DIR}/decoded/"126

241```bash242DEST="${CODEX_HOME:-$HOME/.codex}/pets/${PET_NAME}"243mkdir -p "${DEST}"244cp "${RUN_DIR}/pet.json" "${RUN_DIR}/spritesheet.webp" "${DEST}/"245echo "Codex Pet installed at ${DEST}"246```

227228```bash229cat > "${RUN_DIR}/pet.json" <<EOF230{231  "id": "${PET_NAME}",232  "displayName": "${PET_NAME}",233  "description": "${PET_DESC}",234  "spritesheetPath": "spritesheet.webp"235}236EOF237```

241```bash242DEST="${CODEX_HOME:-$HOME/.codex}/pets/${PET_NAME}"243mkdir -p "${DEST}"244cp "${RUN_DIR}/pet.json" "${RUN_DIR}/spritesheet.webp" "${DEST}/"245echo "Codex Pet installed at ${DEST}"