codex-app-ref-refresh

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS

Full Analysis

[COMMAND_EXECUTION]: The refresh-codex-ref.mjs script executes shell commands using spawnSync. It invokes npx to run the @electron/asar extraction tool and the prettier code formatter.
[EXTERNAL_DOWNLOADS]: The script uses npx -y, which may download the @electron/asar and prettier packages from the public NPM registry at runtime if they are not already cached.

Audit Metadata

Risk Level

SAFE

Analyzed

Aug 26, 2026, 02:00 AM

Security Audit — agent-trust-hub — codex-app-ref-refresh