provider-switch
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches model configuration metadata from DeepSeek's official domain at
https://cdn.deepseek.com/api-docs/codex-deepseek-setup.shduring the installation of Codex profiles.\n- [COMMAND_EXECUTION]: Installation and validation scripts use subprocesses to verify agent versions (claude --version,codex --version), launch text editors to manage secrets, and facilitate local loopback validation against a mock server.\n- [PRIVILEGE_ESCALATION]: The skill generates and installs executable wrappers that explicitly bypass the agent's interactive permission prompts and sandbox protections using flags like--dangerously-skip-permissionsand--dangerously-bypass-approvals-and-sandbox.\n- [DYNAMIC_EXECUTION]: The installer scripts assemble and write executable shell wrappers and JSON/TOML configuration files at runtime by populating bundled templates with user-specific paths and settings.
Audit Metadata