Skills
skills/aradotso/codex-skills/codex-shim-byok-models/Gen Agent Trust Hub

codex-shim-byok-models

Fail

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions and setup script clone code from a non-trusted external repository: https://github.com/0xSero/codex-shim.
  • [REMOTE_CODE_EXECUTION]: The skill installs and executes the downloaded code by symlinking it into the user's PATH (~/.local/bin/codex-shim, ~/.local/bin/codex-app) and running it as a background daemon.
  • [COMMAND_EXECUTION]: The 'macOS Picker Patch' section utilizes sudo and shell utilities (sed, npx @electron/asar, codesign) to perform unauthorized modifications to the Codex.app application binary to bypass internal checks.
  • [CREDENTIALS_UNSAFE]: The skill accesses highly sensitive credential files, specifically ~/.codex/auth.json (which contains Codex access tokens) and ~/.factory/settings.json (which stores third-party API keys).
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 13, 2026, 12:03 AM
Security Audit — agent-trust-hub — codex-shim-byok-models