collaborating-with-codex

Warn

Audited by Snyk on Feb 21, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill exposes explicit options to run arbitrary commands without sandboxing ("--sandbox danger-full-access" and "--yolo") and to operate with full filesystem/config access (e.g. loading ~/.codex/config.toml), which enables and encourages modifying system state or bypassing protections even though it doesn't explicitly say "use sudo".
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 21, 2026, 10:39 AM