odai-orchestration
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several Node.js scripts (
scripts/install-routing.mjs,scripts/run-role.mjs) that utilizechild_process.spawnSyncto interact with the local environment. These scripts are designed to execute thecodexCLI or other local agent binaries to perform role-specific tasks and verify configuration states. - [DYNAMIC_EXECUTION]: The installation utility (
install-routing.mjs) dynamically generates and writes configuration files (TOML, JSON) and helper scripts to agent-specific directories such as~/.codexor~/.claude. This process is used to register custom agent roles and is consistent with the skill's stated purpose of orchestration management. - [SAFE]: The code follows secure practices for configuration management, such as performing atomic writes to files, utilizing safe path resolution to prevent directory traversal, and maintaining a manifest to track and rollback changes during uninstallation. No external network exfiltration or obfuscated malicious payloads were detected.
Audit Metadata