codex-app-server
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a Python script (
scripts/probe_app_server.py) that executes thecodexcommand-line utility. It usessubprocess.runandsubprocess.Popento generate JSON schemas, TypeScript bindings, and to initiate a local JSON-RPC session for runtime discovery. These executions are constrained to the specificcodexbinary and are essential for the skill's primary function of providing 'installed-build truth'. - [EXTERNAL_DOWNLOADS]: The documentation references official external resources from OpenAI, including GitHub repositories (
github.com/openai/codex) and the developer portal (developers.openai.com). These references are used for obtaining the most recent official protocol behavior and integration guidelines. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent ingests information from local command outputs (via
scripts/probe_app_server.py) and external documentation retrieved through theopenaiDeveloperDocsMCP. - Boundary markers: The probe script enforces structural boundaries by parsing results as JSON before they are processed by the agent.
- Capability inventory: The skill can execute local shell commands (specifically the
codexbinary) and interact with external documentation APIs. - Sanitization: While JSON parsing provides structural safety for local data, the skill relies on the agent's inherent safety filters when processing unstructured text from official documentation.
Audit Metadata