codex-manager-rust
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONDYNAMIC_EXECUTIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs users to download and execute pre-compiled binaries (MSI, DMG, AppImage) and a Docker image from an unverified GitHub and Docker Hub account managed by 'qxcnm'.
- [EXTERNAL_DOWNLOADS]: Software updates and core components are retrieved from unverified external sources, presenting a significant supply chain threat as the vendor is not on the trusted list.
- [DATA_EXFILTRATION]: The tool is specifically designed to collect, centralize, and export sensitive authentication tokens and platform keys for various AI services.
- [DYNAMIC_EXECUTION]: Implements a Rhai-based plugin system that allows the execution of dynamic scripts at runtime with access to internal system calls and the account database.
- [PERSISTENCE]: The plugin manifest supports automated background tasks using cron-style scheduling (e.g., '0 */1 * * *'), enabling the execution of code across sessions without user intervention.
- [COMMAND_EXECUTION]: The setup documentation requires the execution of shell commands that bypass macOS Gatekeeper security controls and mount local host directories into Docker containers.
Recommendations
- AI detected serious security threats
Audit Metadata