role-creator

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
9
Flagged
9
Chunks
10
Flagged Files (9)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: role-creator description: Create and install Codex custom agent roles in ~/.codex/config.toml, generate role config files, enforce supported keys, and guide users through required role inputs (model, reasoning effort, developer_instructions). --- # Role Creator ## Overview Use this skill when the user wants to create, update, or troubleshoot custom subagent roles backed by `[agents.<role>]` and a role `config_file`. This skill installs the role into `~

Tool: SKILL.md [2/2] Description: and unsupported keys.

references/role-config-reference.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/role-config-reference.md Description: # Role Config Reference ## Canonical Sources In This Repo - `codex-rs/core/src/config/mod.rs` - `codex-rs/core/src/agent/role.rs` - `codex-rs/core/src/tools/handlers/multi_agents.rs` - `codex-rs/core/config.schema.json` ## Role Declaration Shape (`~/.codex/config.toml`) ```toml [agents.researcher] description = "Read-only researcher role" config_file = "~/.codex/agents/researcher.toml" ``` ### Supported keys under `[agents.<role>]` - `descri

scripts/install_role.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/install_role.sh Description: #!/usr/bin/env bash set -euo pipefail usage() { cat <<'USAGE' Usage: install_role.sh --role-name NAME --description TEXT --role-config-file PATH [options] Options: --config PATH Target config.toml (default: ~/.codex/config.toml) --update-existing Allow updating an existing [agents.<role>] definition --disable-multi-agent Do not force features.multi_agent=true -h, --help Show this help USAGE } config_path="${HOME}/.codex/config

scripts/validate_role.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/validate_role.sh Description: #!/usr/bin/env bash set -euo pipefail usage() { cat <<'USAGE' Usage: validate_role.sh --role-name NAME --config PATH --role-config PATH --schema PATH USAGE } role_name="" config_path="" role_config_path="" schema_path="" while [[ $# -gt 0 ]]; do case "$1" in --role-name) role_name="$2"; shift 2 ;; --config) config_path="$2"; shift 2 ;; --role-config) role_config_path="$2"; shift 2 ;; --schema) schema_path="$2"; shift 2 ;; -h|--help) usage; exit 0 ;; *)

scripts/write_role_config.shHIGH
78.3%

Malicious tool definition detected

Tool: scripts/write_role_config.sh Description: #!/usr/bin/env bash set -euo pipefail usage() { cat <<'USAGE' Usage: write_role_config.sh --output PATH --role-name NAME --model MODEL --reasoning EFFORT [options] Required: --output PATH --role-name NAME --model MODEL --reasoning none|minimal|low|medium|high|xhigh Developer instructions (choose one): --developer-instructions TEXT --developer-instructions-file PATH Optional: --sandbox-mode read-only|workspace-write|danger-full-access --network-acce

templates/frontend-architecture-role.tomlHIGH
78.3%

Malicious tool definition detected

Tool: templates/frontend-architecture-role.toml Description: # Example role that explicitly calls a skill.

templates/full-role-config.tomlHIGH
78.3%

Malicious tool definition detected

Tool: templates/full-role-config.toml Description: # Full-surface example.

templates/minimal-role-config.tomlHIGH
78.3%

Malicious tool definition detected

Tool: templates/minimal-role-config.toml Description: # Minimal role config (recommended default).

templates/restricted-role-config.tomlHIGH
78.3%

Malicious tool definition detected

Tool: templates/restricted-role-config.toml Description: # Constrained role profile.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
9
Files Flagged
9
Chunks Analyzed
10
Analyzed
Feb 22, 2026, 07:13 PM
Security Audit — runlayer — role-creator