codex

The skill explicitly recommends `--yolo` and autonomous review/build flows, reducing approval barriers. Reviewing PRs and diffs from untrusted repos while the agent can execute commands and modify files creates a meaningful indirect prompt-injection surface.