codex-first

Warn

Audited by Socket on Nov 1, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/codex-resume

The fragment is a session-resume automation script, not evident malware. Its principal security concern is intentionally resuming Codex with approvals and sandboxing disabled, so the resumed agent can have broader effects in the working environment. Use only with trusted sessions and prompts, and understand the configured Codex permissions.

Confidence: 98%Severity: 58%
Audit Metadata
Analyzed At
Nov 1, 2026, 07:08 AM
Package URL
pkg:socket/skills-sh/steipete%2Fagent-scripts%2Fcodex-first%2F@c185abcdfcc0b4cd308389856ba0767788e3b7f82d90f0e6b121e7d49dbe24a5