Skills
skills/oimiragieo/agent-studio/omega-codex-cli/Gen Agent Trust Hub

omega-codex-cli

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill ensures availability of the Codex CLI by attempting to fetch the official @openai/codex package from the NPM registry using npx if the local binary is not found.
  • [COMMAND_EXECUTION]: Core functionality is implemented using child_process.spawn with explicit argument arrays and shell: false, which effectively prevents shell injection vulnerabilities. It also manages process lifecycles on Windows using taskkill for timeout enforcement.
  • [DATA_EXFILTRATION]: The skill transmits prompt data and code context to OpenAI's API. This is the intended primary purpose of the tool, though it constitutes data egress to a third-party service.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 08:51 AM