codex-mcp-server-integration
Warn
Audited by Socket on Sep 16, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core purpose is coherent, and use of the official OpenAI Codex CLI is expected. Risk comes from installing and routing data through an unpinned third-party MCP wrapper (`codex-mcp-server`) that is not the same publisher as the skill or OpenAI, creating supply-chain and local data-handling concerns disproportionate to a simple integration guide.
Confidence: 90%Severity: 68%
Audit Metadata