codex-cleanup
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Executes a local bash script ('scripts/codex-cleanup.sh') that uses standard utilities like 'pgrep', 'ps', 'find', and 'sqlite3' to perform system maintenance and data pruning tasks.
- [EXTERNAL_DOWNLOADS]: Includes instructions for the user to download the skill's supporting repository via 'git clone' from the author's GitHub account ('aelaguiz/arch_skill').
- [SAFE]: The script implements significant safety rails, including a default dry-run mode, explicit path validation to ensure operations are confined to the user's home directory under a folder named 'codex' or '.codex', and a check for active processes to avoid data corruption.
- [SAFE]: The cleanup logic is designed to preserve critical configuration and authentication files, such as 'auth.json' and 'config.toml', by explicitly excluding them from the deletion and truncation processes.
Audit Metadata