codex-agent-setup
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes bash scripts (
setup.shandgenerate.sh) that invokepython3to run scripts located in the project's root directory. - Evidence:
scripts/setup.shandscripts/generate.shcalculate a root path (PLUGIN_ROOT) and execute scripts at${PLUGIN_ROOT}/scripts/codex-agents/install.pyandgenerate.pyrespectively. - [SAFE]: The behavior of the skill is consistent with its stated purpose of installing and maintaining a custom Codex agent.
- No network exfiltration or data exposure patterns were detected.
- No obfuscation or prompt injection attempts were found.
- The resource access pattern (navigating up from the skill directory to reach project-level scripts) is a standard practice for project-integrated tools.
Audit Metadata