collaborating-with-codex
Warn
Audited by Snyk on Feb 21, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill exposes explicit options to run arbitrary commands without sandboxing ("--sandbox danger-full-access" and "--yolo") and to operate with full filesystem/config access (e.g. loading ~/.codex/config.toml), which enables and encourages modifying system state or bypassing protections even though it doesn't explicitly say "use sudo".
Audit Metadata