codex-skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The helper scripts
run_eval.pyandimprove_description.pyexecute thecodexcommand-line utility viasubprocess.runto perform automated skill testing, evaluation, and trigger optimization. - [COMMAND_EXECUTION]: The
generate_review.pyscript executes shell commands includinglsofandkillto manage the lifecycle of the local feedback server (defaulting to port 3117). - [EXTERNAL_DOWNLOADS]: The
viewer.htmltemplate loads the SheetJS library from a Content Delivery Network (cdn.sheetjs.com) to allow for inline rendering of spreadsheet files within the evaluation viewer. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted code and evaluation parameters from the skill currently under development, which are then passed to specialized subagents for grading and analysis.
- Ingestion points: Reads
SKILL.md, reference files, andevals.jsonfrom the user-provided skill development directory. - Boundary markers: The
improve_description.pyscript uses XML-style tags (e.g.,<skill_content>,<scores_summary>) to delimit ingested content within prompts sent to subagents. - Capability inventory: The skill possesses the ability to execute platform-specific CLI commands and perform file system operations (read/write/zip) within the local workspace.
- Sanitization: No specific filtering or escaping of ingested skill instructions is performed prior to interpolation into subagent prompts.
Audit Metadata