lov-open-codex-session
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a host-provided tool (navigate_to_codex_page) for session navigation. It includes strict instructions for the agent to validate and sanitize user-provided identifiers (UUIDs or session IDs) to prevent the processing of malformed data, arbitrary URLs, or system paths.\n- [SAFE]: User profile data is managed locally through scripts/profile_store.py. This script implements security controls including atomic file operations, specific file mode settings (0o600), and an explicit blocklist to prevent sensitive information such as credentials, tokens, or passwords from being persisted in the profile.\n- [SAFE]: The provided Python scripts (profile_store.py and validate_skill.py) are used for local configuration and metadata validation. They rely on standard libraries and safe parsing methods (e.g., yaml.safe_load) and do not perform unauthorized network operations or privilege escalation.
Audit Metadata