patch-codex-fast
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill performs automated modifications to the Codex application bundle by extracting the
app.asararchive, applying regex-based patches to internal JavaScript files, and disabling Electron integrity fuses such asOnlyLoadAppFromAsarandEnableEmbeddedAsarIntegrityValidation. These actions are the primary, documented functions of the skill and are performed locally to enable features restricted in standard API key mode. - [REMOTE_CODE_EXECUTION]: The skill invokes
npxto run the@electron/asarand@electron/fusesutility packages. These are official tools maintained by the well-known Electron organization and are used here for standard application bundle management. - [PRIVILEGE_ESCALATION]: The skill modifies files within standard application installation paths (such as
/Applicationson macOS or%LOCALAPPDATA%on Windows) and utilizes thecodesignsystem utility on macOS to re-sign the modified bundle. These operations are transparently documented as necessary steps for patching the local application.
Audit Metadata