codexmcp-claude-codex-collaboration

SUSPICIOUS. The collaboration purpose is plausible, but the trust chain is weak: the skill published by ara.so tells users to execute unpinned code from a different GitHub org via uvx, then optionally auto-approve that MCP tool. Official uv installers reduce concern for the prerequisite step, but the core MCP server provenance and broad delegated action modes make the overall skill a high security risk.