codex-cleanup

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Executes a local bash script ('scripts/codex-cleanup.sh') that uses standard utilities like 'pgrep', 'ps', 'find', and 'sqlite3' to perform system maintenance and data pruning tasks.
  • [EXTERNAL_DOWNLOADS]: Includes instructions for the user to download the skill's supporting repository via 'git clone' from the author's GitHub account ('aelaguiz/arch_skill').
  • [SAFE]: The script implements significant safety rails, including a default dry-run mode, explicit path validation to ensure operations are confined to the user's home directory under a folder named 'codex' or '.codex', and a check for active processes to avoid data corruption.
  • [SAFE]: The cleanup logic is designed to preserve critical configuration and authentication files, such as 'auth.json' and 'config.toml', by explicitly excluding them from the deletion and truncation processes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 03:10 AM
Security Audit — agent-trust-hub — codex-cleanup