x9-codex-delegation
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local system by executing the
codexcommand-line interface to perform code analysis and implementation tasks. - Evidence: Use of
codex exec,codex exec resume, andcodex:codex-rescueplugin subagents (SKILL.md, references/codex-cli.md). - Accesses local configuration file at
~/.codex/config.tomlto inherit model settings. - Maintains an operational history log by appending data to
~/.local/share/x9/codex-delegation-log.md. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface characteristic of task delegation tools, as it passes potentially untrusted project data to a sub-agent with write capabilities.
- Ingestion points: Processes "relevant files/sources" from the active project workspace (SKILL.md).
- Boundary markers: The instructions do not specify the use of XML tags or other delimiters to isolate ingested file content from the delegation brief.
- Capability inventory: The delegated agent is granted
workspace-writesandbox permissions, allowing it to modify project files (references/codex-cli.md). - Sanitization: No sanitization or filtering of the ingested content is documented before it is passed to the delegate.
Audit Metadata