codex-skill-admin
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/codex_skill_admin.pyusessubprocess.Popenandsubprocess.runto interact with the localcodexCLI tool. This is used to manage a temporary application server for communication and to verify skill visibility in model prompts. These operations are restricted to the local environment and the official platform binary. - [DATA_EXFILTRATION]: The skill accesses local session history files located in
~/.codex/sessionsand related directories to audit which skills have been used. This data is processed entirely locally to generate usage statistics; no external network requests or exfiltration attempts were found. Network activity is confined to127.0.0.1. - [EXTERNAL_DOWNLOADS]: The skill does not download any external dependencies, scripts, or binary payloads. It relies exclusively on the Python standard library and the pre-installed
codexCLI. - [PROMPT_INJECTION]: Analysis of the instructions and metadata revealed no attempts to override agent safety guidelines, bypass restrictions, or leak system prompts. The skill's instructions focus on administrative tasks and usage auditing.
Audit Metadata