codex-orchestrate

SUSPICIOUS. The skill’s orchestration behavior matches its stated purpose, and its data flow to official Codex is broadly coherent, but it relies on an unverified local agents-bridge wrapper executable as a core trust boundary. That keeps overall risk high even without clear evidence of outright malware or credential theft.