codex-cli-review
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands (
git status,git diff,codex review) via a bash script to identify code changes and perform analysis. It also usesevalto execute the constructed CLI command, which incorporates user-provided parameters like--base,--title, and--prompt. Whileevalwith user input is generally a risk, the context here is a local developer tool where such parameters are expected for functionality. - [EXTERNAL_DOWNLOADS]: The script documentation suggests installing the
@openai/codexpackage from NPM if the command is missing (npm install -g @openai/codex). This is a reference to a well-known service and package registry, which is standard for developer tooling. - [DATA_EXPOSURE]: The skill explicitly requests
disk-full-read-accesswithin the Codex sandbox configuration. This high-privilege access is necessary for the stated purpose of the skill: allowing the AI to independently explore related dependencies and project structure to provide a deep review.
Audit Metadata