ce-work-beta
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Git commands for branch management, committing, and merging, and uses the
codexCLI for code implementation. It also utilizes dynamic context injection (the!syntax) inSKILL.mdandreferences/codex-delegation-workflow.mdto resolve the repository root and verify tool availability during skill loading. - [EXTERNAL_DOWNLOADS]: Documentation references the installation of the
codexcommand-line tool from the official@openai/codexNPM package or via Homebrew. - [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of model-generated code through the
codex execcommand. High-privilege execution modes, such as the 'yolo' mode required for running tests, are protected by a mandatory one-time user consent process. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests untrusted data from plan documents and user descriptions. These inputs enter the context in
SKILL.mdand are interpolated into prompts for the Codex tool inreferences/codex-delegation-workflow.md. The workflow mitigates risk by using XML tags as boundary markers to delimit external content, though no explicit sanitization of these inputs is documented.
Audit Metadata