codex

SUSPICIOUS: the skill’s purpose matches its capabilities and the Codex install source appears official, so this is not a deceptive credential-harvesting skill. Risk remains medium because it explicitly recommends unsafe `--yolo` operation, can act on untrusted PR content, and enables autonomous code changes, pushes, and PR interactions with real external impact.