codex-subagent

SUSPICIOUS: the skill’s purpose and the official Codex CLI usage are coherent, and there is no clear credential theft or malicious exfiltration. However, it normalizes launching autonomous subagents with approvals and sandbox bypassed, including parallel background execution and web-fed tasks, creating disproportionate execution risk for a helper skill.