github-issue-driven-dev
Pass
Audited by Gen Agent Trust Hub on May 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The bundled
codex-gh-workflowscript performs extensive local operations, including: - File system modifications: Creating directories (
.codex,.github), writing Git hooks, and installing repository templates. - Permission management: Setting executable bits (
chmod +x) on generated Git hooks. - Symbolic link creation: The
install-bincommand creates a symlink in the user's local bin directory. - Git and GitHub CLI integration: Orchestrates repository state checks, branch management, and GitHub API interactions through the
ghtool. - [EXTERNAL_DOWNLOADS]: The skill generates a GitHub Actions CI workflow (
ci.yml) that is designed to fetch and install dependencies from standard registries (npm, PyPI) during repository testing and validation. - [REMOTE_CODE_EXECUTION]: The tool generates and installs scripts locally (Git hooks) and for remote environments (GitHub Actions) that execute automatically during specific lifecycle events like committing code or pushing to a branch.
- [DATA_EXFILTRATION]: The skill is designed to push local repository changes and development logs to a configured GitHub remote. While this involves sending data externally, it is the primary stated function of the development workflow tool.
Audit Metadata