codex-app-ref-refresh
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/refresh-codex-ref.mjsexecutes shell commands usingspawnSyncto handle file extraction and formatting tasks. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@electron/asarandprettierpackages from the npm registry. These are well-known, industry-standard tools for processing Electron application files and code formatting. - [SAFE_PRACTICES]: The provided execution script implements robust path validation through the
assertSafeRefDirfunction, which ensures the tool only modifies a directory named 'ref' relative to the current workspace and prevents operations on sensitive locations like the root or home directories.
Audit Metadata