codex-utils — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited codex-utils (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the lightest available tool that resolves the need. The current session's tool catalog, schemas, and restrictions are authoritative; never assume a tool name from another host or session exists.
keep a short checklist. Do not create a persistent goal unless requested.
current mode restrictions. Ask directly when explicit approval is required; a recommended or preselected option is not approval.
judging them. Use original detail only when necessary.
In Code Mode, filter ALL_TOOLS by name/description and call the matching tools method. Use tool search only when the session exposes it.
configuration, or secret-bearing subprocess arguments while inspecting tools.
Promise.allSettled when Code Mode isavailable; inspect every result. Keep dependent calls, mutations, approvals, waits, and tools marked non-parallel sequential.
by the user, after the available discovery/install tools confirm an exact match. Installed, enabled, exposed, and healthy are different states; verify the one the task needs.
Use the available browsing tool's search/open/find operations for current facts and source verification. Prefer primary sources; inspect the actual page before relying on search snippets. For OpenAI product questions, inspect local code/help first and use official OpenAI documentation as the fallback. Keep private source and credentials out of external research services.
Verify unstable or high-stakes claims with tools instead of memory. Keep tool use proportional: do not browse, ask, plan, install, or delegate when unnecessary.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.