codex-shim-byok-models

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The project contains deliberate allowlist evasion (an ASAR patch and re-signing), proxying of local auth tokens, and explicit support for routing requests to arbitrary upstream endpoints and MCP tools—features that enable intentional bypassing of protections and easy exfiltration of credentials or local resources if misused.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt includes a macOS ASAR patch that runs multiple sudo commands to modify /Applications/Codex.app (copying, replacing app.asar, updating Info.plist, and ad-hoc codesigning), which explicitly alters system application files and requires elevated privileges—this directly compromises the machine state.