codex-provider-sync-skill
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to download a Windows executable file (
CodexProviderSync.exe) from a personal, unverified GitHub repository (github.com/Dailin521/codex-provider-sync/releases). Executing unverified binaries can lead to complete system compromise. - [REMOTE_CODE_EXECUTION]: The skill provides instructions to install a global Node.js package directly from a remote git source (
npm install -g git+https://github.com/Dailin521/codex-provider-sync.git). Installing packages from unverified third-party repositories allows for arbitrary code execution during installation and runtime. - [COMMAND_EXECUTION]: The skill encourages the execution of various sensitive shell commands, including terminating system processes (
pkill,taskkill) and directly manipulating application databases usingsqlite3. These actions target internal application state and can lead to data corruption or unexpected behavior. - [DATA_EXFILTRATION]: The skill targets and manipulates sensitive user data paths, including session rollout files (
~/.codex/sessions), archived sessions, and the global application state (state_5.sqlite). While the stated purpose is synchronization, the underlying tool has full read/write access to these sensitive data stores.
Recommendations
- AI detected serious security threats
Audit Metadata