keep-codex-fast-maintenance
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires cloning a repository from https://github.com/vibeforge1111/keep-codex-fast. This repository account is not a recognized trusted vendor and does not match the stated author's official resource patterns.
- [REMOTE_CODE_EXECUTION]: The skill provides numerous examples and instructions to run scripts/keep_codex_fast.py, a script provided by the external, untrusted repository. This constitutes execution of remote code on the local system.
- [COMMAND_EXECUTION]: Maintenance commands involve executing shell commands that move files, rotate SQLite logs, and modify the config.toml file. This grants the skill significant control over local application state.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from local Codex history (chat titles, file paths, IDs) and project configuration. Ingestion points: logs_2.sqlite*, config.toml, and active session titles/IDs. Boundary markers: None identified; the skill directly interpolates processed data into command arguments. Capability inventory: File system move operations, log rotation, modification of config.toml, and subprocess.run calls. Sanitization: The skill mentions path normalization for Windows mismatches but lacks general sanitization for other ingested metadata that could be used for argument injection.
Recommendations
- AI detected serious security threats
Audit Metadata