codex-implementation
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and requires the OpenAI
codexCLI tool as a prerequisite for its implementation workflow. - [COMMAND_EXECUTION]: Executes shell commands including
codex execwith workspace write permissions,git status, and user-defined verification scripts to modify and validate code. - [PROMPT_INJECTION]: Identified an indirect prompt injection surface (Category 8) due to the nature of automated code modification based on potentially untrusted repository data.
- Ingestion points: Repository files and user-defined implementation goals are ingested into the context via the
codextool inSKILL.md. - Boundary markers: The skill recommends writing self-contained prompts but does not specify technical delimiters to isolate instructions from the repository content processed by the tool.
- Capability inventory: The skill possesses the capability to write to the file system (
workspace-write) and execute arbitrary verification commands (tests, typechecks) on the resulting output. - Sanitization: Mitigation is implemented via instructions to manually inspect git diffs and run specific verification commands before finalizing changes.
Audit Metadata