codex-hooks-builder
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a code generator for local environment hooks. It creates shell scripts in the .codex directory and sets execution permissions via chmod 755 to allow the platform to run them.
- [OBFUSCATION]: The Python scaffolding script uses string concatenation (e.g., ig""nore) to define security-sensitive keywords within its defensive blocklist templates. This is a non-malicious use of obfuscation designed to prevent safety filters from interfering with the generation of security rules.
- [PROMPT_INJECTION]: The skill generates scripts specifically designed to detect and mitigate prompt injection attempts by monitoring user input for bypass keywords and instructing the agent to maintain its system prompt.
Audit Metadata