codex-cli
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes installation scripts (
install.shandinstall.ps1) to fetch theSKILL.mddefinition from the author's GitHub repository. - [COMMAND_EXECUTION]: The skill invokes the
codexCLI to perform code analysis and generation. The instructions explicitly direct the agent to avoid using high-privilege sandbox bypass flags without per-run user approval. - [REMOTE_CODE_EXECUTION]: Installation and verification involve downloading and executing code from the vendor's official repository, which is standard behavior for this type of developer tool.
- [DATA_EXFILTRATION]: The included test runner (
tests/run.py) performs connectivity checks against the vendor's own resource URLs to ensure installer availability.
Audit Metadata