ce-work-beta
Warn
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of system commands, including a complex
gitresolution chain to find the repository root and retrieve configuration from.compound-engineering/config.local.yaml. - [COMMAND_EXECUTION]: The delegation workflow executes the
codexCLI tool. When configured for 'yolo' mode, it uses the--dangerously-bypass-approvals-and-sandboxflag, which provides the tool with full system access and network connectivity to perform automated code changes and verification. - [REMOTE_CODE_EXECUTION]: The skill's primary 'beta' feature is the delegation of code implementation to an external model via the
codex execcommand. This pattern involves executing code generated or provided by a remote service directly on the user's system. - [EXTERNAL_DOWNLOADS]: The skill mentions and encourages the installation of the
@openai/codexpackage from the NPM registry as a prerequisite for its delegation features. - [DYNAMIC_CONTEXT_INJECTION]:
SKILL.mdand the delegation reference file use the!syntax to execute shell logic during the skill loading process. These commands are used to dynamically resolve file paths and check for the presence of thecodexbinary on the system path.
Audit Metadata