codex-app-remote-exec
Warn
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to run arbitrary shell commands on remote hosts through an Electron application bridge. Examples in SKILL.md demonstrate using
/bin/zsh -lcto execute complex scripts and operational fixes.\n- [REMOTE_CODE_EXECUTION]: Thescripts/remote-exec.jsscript facilitates remote execution by injecting JavaScript into the Codex App using the Chrome DevTools Protocol (CDP)Runtime.evaluatemethod to communicate with the app's renderer process.\n- [COMMAND_EXECUTION]: The script leverages thewindow.electronBridge.sendMessageFromViewinternal API within the Codex App to bypass standard security boundaries and execute shell commands on connected remote environments.\n- [COMMAND_EXECUTION]: The skill directs agents to search for host identifiers within sensitive local directories like$HOME/Library/Logsand$HOME/Library/Application Support/Codex, which could lead to the exposure of private usage and connection data.
Audit Metadata