codex-first
Warn
Audited by Socket on Nov 1, 2026
1 alert found:
AnomalyAnomalyscripts/codex-resume
LOWAnomalyLOW
scripts/codex-resume
The fragment is a session-resume automation script, not evident malware. Its principal security concern is intentionally resuming Codex with approvals and sandboxing disabled, so the resumed agent can have broader effects in the working environment. Use only with trusted sessions and prompts, and understand the configured Codex permissions.
Confidence: 98%Severity: 58%
Audit Metadata