model-usage
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
codexbarCLI tool usingsubprocess.check_outputinscripts/model_usage.py. The arguments are passed as a list and the variableprovideris validated against a strict set of choices (codex,claude) viaargparse, preventing command injection. - [EXTERNAL_DOWNLOADS]: The skill specifies a dependency on the
codexbarCLI, which is installed via thesteipete/tap/codexbarHomebrew cask. This is a legitimate external tool required for the skill's primary functionality.
Audit Metadata