codex-browser-fix
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute a preflight script (
browser-plugin-preflight.mts) using the Bun runtime to synchronize system states and verify configurations. - [DYNAMIC_EXECUTION]: The skill generates a local shell script (
browser-codex) that acts as a wrapper for the Codex CLI. This script is used to inject specific command-line arguments into a subprocess of the browser helper to fix authentication issues. - [PERSISTENCE]: The skill modifies the user's
config.tomlfile to update environment variables, CLI paths, and security trust settings. These changes persist across sessions to ensure the browser connection remains stable. - [INDIRECT_PROMPT_INJECTION]: The skill handles data from external Chromium extensions to list and select browser profiles. While this is an ingestion point for untrusted data, the skill includes explicit instructions for the agent to verify choices and avoid guessing, mitigating the risk of accidental obedience.
Audit Metadata