codex-tmux

Fail

Audited by Socket on Mar 10, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The Codex-tmux skill behaves as a specialized orchestration/transport utility for long-running Codex tasks. Its footprint—local Python script invocation, tmux-based signaling, and writing result JSON to disk—matches its stated purpose without introducing credential exposure, external data exfiltration, or dangerous download behavior. Overall, the tool appears benign and proportionate to its purpose, with low-risk data flows confined to the local host. Minor considerations include ensuring result files are stored securely and access-controlled to prevent inadvertent leakage of potentially sensitive prompt content via /tmp unless explicitly intended.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 10, 2026, 02:40 PM
Package URL
pkg:socket/skills-sh/build000r%2Fskills%2Fcodex-tmux%2F@4186e45de0b1b648c4b9eee887ad3e272d26b293