codex-essentials

Warn

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install software from external package registries.
  • The instruction pip install cli-anything-hub targets a third-party package from PyPI that is not from a known trusted organization or a well-known technology service.
  • The instruction npx -y @modelcontextprotocol/server-github fetches the official GitHub MCP server package.
  • [COMMAND_EXECUTION]: The skill contains specific command-line instructions intended for execution to set up the agent environment.
  • Evidence: codex mcp add github -- npx -y @modelcontextprotocol/server-github.
  • Evidence: cli-hub install browser.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 8, 2026, 05:56 AM
Security Audit — agent-trust-hub — codex-essentials