keep-codex-fast
Warn
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/keep_codex_fast.pyexecutes system commands viasubprocess.check_outputto monitor running application processes, specifically usingpson Unix systems and PowerShell on Windows. - [DYNAMIC_EXECUTION]: The
tests/smoke_test.pyscript usesexec()to dynamically execute generated restoration code during its automated testing procedures. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted chat history data to create handoff documents and reactivation prompts for new agent threads. Ingestion points: Reads
rollout.jsonlsession files andstate_5.sqlitedatabases. Boundary markers: The instructions lack strict delimiters or escaping for the interpolated chat content. Capability inventory: The skill has broad file system access, including moving and writing files. Sanitization: No filtering of chat content is performed before it is used to generate new prompts. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides the ability to expose local file paths, thread identifiers, and process metadata to the agent and user, particularly when the
--detailsflag is employed.
Audit Metadata