codex-app-server

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to interact with the codex CLI tool by spawning it as a child process to run the application server and generate local schema files.
  • Evidence: The scripts/generate-schemas.sh script executes codex app-server generate-ts and codex app-server generate-json-schema to create type definitions.
  • Evidence: Template code in assets/node-stdio-starter/src/index.ts and assets/electron-main-process/src/main.ts uses child_process.spawn to manage the codex binary.
  • Evidence: The Swift bridge in assets/swift-bridge-patterns/MacOSProcessBridge.swift uses the Process class to execute the codex binary locally.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 03:31 AM