codex-mcp-server-integration

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is coherent, and use of the official OpenAI Codex CLI is expected. Risk comes from installing and routing data through an unpinned third-party MCP wrapper (`codex-mcp-server`) that is not the same publisher as the skill or OpenAI, creating supply-chain and local data-handling concerns disproportionate to a simple integration guide.

Confidence: 90%Severity: 68%
Audit Metadata
Analyzed At
Sep 16, 2026, 10:33 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fmcp-skills%2Fcodex-mcp-server-integration%2F@c3fd9e5fa31dc5302c0df62de2996f3a3dd88140dddddce59da1532302a8bc45
Security Audit — socket — codex-mcp-server-integration