codex-manager-rust

SUSPICIOUS. The core behavior matches the stated purpose of a local Codex account/gateway manager, and the documented binary source appears to be the same org's official GitHub releases rather than an unrelated host. However, the skill concentrates sensitive account/session tokens, supports forwarding to third-party upstream APIs, exposes a plugin installation path, and uses unpinned executable downloads, so the overall footprint is higher risk than a normal documentation-only skill.