codex-app-mirror-installer
Warn
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides numerous examples and instructions for downloading binary installers (.msix and .dmg) from an untrusted third-party CDN (
codexapp.agentsmirror.com) and a personal GitHub repository (Wangnov/codex-app-mirror).\n- [COMMAND_EXECUTION]: The skill includes shell, PowerShell, and Python scripts that execute system commands likecurl,Invoke-WebRequest,shasum, andhdiutilto fetch, verify, and inspect remote binaries.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from external sources, including the GitHub API and a third-party CDN, which provides an attack surface for supplying malicious payloads to an agent or user.\n - Ingestion points: Release metadata and checksum files fetched from
api.github.comandcodexapp.agentsmirror.com.\n - Boundary markers: The provided scripts lack explicit delimiters or warnings to ignore potentially malicious content embedded in the downloaded assets.\n
- Capability inventory: Includes network operations, file system access, and software installation tools.\n
- Sanitization: No validation or sanitization is performed on the content of the downloaded manifests beyond hash comparison.
Audit Metadata