codex-cli

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes installation scripts (install.sh and install.ps1) to fetch the SKILL.md definition from the author's GitHub repository.
  • [COMMAND_EXECUTION]: The skill invokes the codex CLI to perform code analysis and generation. The instructions explicitly direct the agent to avoid using high-privilege sandbox bypass flags without per-run user approval.
  • [REMOTE_CODE_EXECUTION]: Installation and verification involve downloading and executing code from the vendor's official repository, which is standard behavior for this type of developer tool.
  • [DATA_EXFILTRATION]: The included test runner (tests/run.py) performs connectivity checks against the vendor's own resource URLs to ensure installer availability.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 07:24 AM