skills/orziz/odai/odai-orchestration/Gen Agent Trust Hub

odai-orchestration

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes several Node.js scripts (scripts/install-routing.mjs, scripts/run-role.mjs) that utilize child_process.spawnSync to interact with the local environment. These scripts are designed to execute the codex CLI or other local agent binaries to perform role-specific tasks and verify configuration states.
  • [DYNAMIC_EXECUTION]: The installation utility (install-routing.mjs) dynamically generates and writes configuration files (TOML, JSON) and helper scripts to agent-specific directories such as ~/.codex or ~/.claude. This process is used to register custom agent roles and is consistent with the skill's stated purpose of orchestration management.
  • [SAFE]: The code follows secure practices for configuration management, such as performing atomic writes to files, utilizing safe path resolution to prevent directory traversal, and maintaining a manifest to track and rollback changes during uninstallation. No external network exfiltration or obfuscated malicious payloads were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 03:23 PM
Security Audit — agent-trust-hub — odai-orchestration