provider-switch

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches model configuration metadata from DeepSeek's official domain at https://cdn.deepseek.com/api-docs/codex-deepseek-setup.sh during the installation of Codex profiles.\n- [COMMAND_EXECUTION]: Installation and validation scripts use subprocesses to verify agent versions (claude --version, codex --version), launch text editors to manage secrets, and facilitate local loopback validation against a mock server.\n- [PRIVILEGE_ESCALATION]: The skill generates and installs executable wrappers that explicitly bypass the agent's interactive permission prompts and sandbox protections using flags like --dangerously-skip-permissions and --dangerously-bypass-approvals-and-sandbox.\n- [DYNAMIC_EXECUTION]: The installer scripts assemble and write executable shell wrappers and JSON/TOML configuration files at runtime by populating bundled templates with user-specific paths and settings.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 12:40 PM