codex-first

SUSPICIOUS: the skill is purpose-aligned and uses official Codex distribution paths, so it is not malware, but it materially expands execution authority by instructing the agent to use `--yolo`, bypass sandbox/approvals on resume, and let Codex perform impactful git and merge operations. The main risk is autonomy and weakened safeguards, not deceptive provenance or credential theft.