codex-essentials
Warn
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install software from external package registries.
- The instruction
pip install cli-anything-hubtargets a third-party package from PyPI that is not from a known trusted organization or a well-known technology service. - The instruction
npx -y @modelcontextprotocol/server-githubfetches the official GitHub MCP server package. - [COMMAND_EXECUTION]: The skill contains specific command-line instructions intended for execution to set up the agent environment.
- Evidence:
codex mcp add github -- npx -y @modelcontextprotocol/server-github. - Evidence:
cli-hub install browser.
Audit Metadata