codex-supergraph
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively communicates with official Codex infrastructure (
codex.ioandgraph.codex.io). All external resources, including the GraphQL API, documentation, and schema files, originate from the verified author's domains. - [SAFE]: Authentication is managed through a standard environment variable (
$CODEX_API_KEY). The instructions include explicit rules to prevent the agent from printing raw API keys, adhering to secure secret management practices. - [SAFE]: The skill provides structured GraphQL templates and operation mappings for data retrieval. It does not contain any patterns for arbitrary command execution, dynamic code loading, or persistence mechanisms.
- [SAFE]: Mentions of external packages, such as
@codex-data/sdk, refer to official libraries maintained by the skill's author (codex-data), representing legitimate vendor resources.
Audit Metadata