codex

SUSPICIOUS. The skill’s purpose largely matches its capabilities and uses an official OpenAI CLI install path, so it is not overtly malicious. Risk comes from delegating powerful coding/review tasks to an external autonomous CLI, including approval-bypass modes, background execution, and actions on untrusted PR content with write/exec privileges.