tooluniverse-codex-plugin
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the installation script for the 'uv' package manager from the official domain of a well-known technology provider (astral.sh).
- [REMOTE_CODE_EXECUTION]: Executes the 'uv' installation script by piping the download directly to a shell ('curl ... | sh').
- [REMOTE_CODE_EXECUTION]: Uses 'uvx' to download and run the 'tooluniverse' package from PyPI, which acts as the MCP server for the plugin.
- [COMMAND_EXECUTION]: Provides instructions to use the 'codex' and 'git' command-line tools to register a marketplace from the author's GitHub repository ('mims-harvard/ToolUniverse') and install the associated plugin.
- [EXTERNAL_DOWNLOADS]: Includes a manual installation path involving a 'git clone' of the author's public repository.
Audit Metadata