cc-codex-discussion
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill coordinates a multi-round debate by executing shell commands, including running the Codex CLI via
nodeand managing discussion transcripts using a local Python script (scripts/discuss.py). It also uses standard utilities likegit,mkdir, andcpfor repository analysis and file management. - [EXTERNAL_DOWNLOADS]: The skill documentation lists
@openai/codexas a requirement, which is a well-known package from the npm registry. Installation instructions also refer to theskillsCLI and the author's public GitHub repository. - [COMMAND_EXECUTION]: The helper script
discuss.pyreads the user's~/.claude/plugins/installed_plugins.jsonfile. This is performed to programmatically locate the installation path of the Codex plugin required for the skill's functionality. - [PROMPT_INJECTION]: The skill includes an inherent indirect prompt injection surface as it ingests untrusted repository data (such as PR diffs or design specs) for analysis. However, it implements a 'conclusion protocol' requiring evidence-based claims and manual user sign-off to mitigate risks of model misbehavior.
Audit Metadata