openai-codex-security
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the installation and use of a security tool from a well-known service provider. No malicious instructions, obfuscation, or data exfiltration patterns were detected.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@openai/codex-securitypackage from the official NPM registry, which is the standard distribution method for Node.js-based tooling. - [CREDENTIALS_UNSAFE]: The documentation follows security best practices by recommending environment variables for secret management in automated environments and discouraging the persistence of sensitive keys in non-secure locations.
Audit Metadata