The Agent Skills Directory

Local Command Execution: The skill executes standard development tasks such as pnpm install, pnpm build, and pnpm test through a Node.js wrapper (run.mjs). These actions are localized to the repository root and are standard for code verification workflows.
Defensive Environment Handling: The instructions specifically recommend using /usr/bin/env -u OPENAI_API_KEY when running the shell script. This is a security best practice intended to prevent the inheritance of sensitive API keys by the repository's build tools and sub-processes, reducing the risk of accidental secret exposure.
Sandbox Compliance: The skill documentation emphasizes remaining within the 'normal Codex workspace sandbox' and explicitly advises against requesting elevated permissions or retrying with broader host access. This aligns with the principle of least privilege.
Execution Policy Adjustment: For Windows environments, the skill suggests using the -ExecutionPolicy Bypass flag for PowerShell. While this allows the execution of local scripts that might otherwise be blocked by default system policies, it is a routine practice for running repository-specific automation tools and does not constitute a privilege escalation beyond the current user's context.

code-change-verification