codex-app-remote-exec

Warn

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to run arbitrary shell commands on remote hosts through an Electron application bridge. Examples in SKILL.md demonstrate using /bin/zsh -lc to execute complex scripts and operational fixes.\n- [REMOTE_CODE_EXECUTION]: The scripts/remote-exec.js script facilitates remote execution by injecting JavaScript into the Codex App using the Chrome DevTools Protocol (CDP) Runtime.evaluate method to communicate with the app's renderer process.\n- [COMMAND_EXECUTION]: The script leverages the window.electronBridge.sendMessageFromView internal API within the Codex App to bypass standard security boundaries and execute shell commands on connected remote environments.\n- [COMMAND_EXECUTION]: The skill directs agents to search for host identifiers within sensitive local directories like $HOME/Library/Logs and $HOME/Library/Application Support/Codex, which could lead to the exposure of private usage and connection data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 2, 2026, 12:00 PM
Security Audit — agent-trust-hub — codex-app-remote-exec