{"schema_version":1,"workflow_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","workflow_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","page_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","raw_url":"https://tokrepo.com/raw/asset-e9f9cdd0","metadata_url":"https://tokrepo.com/metadata/asset-e9f9cdd0.json","install_plan_url":"https://api.tokrepo.com/api/v1/tokenboard/workflows/install-plan?uuid=e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79&target=codex","recommended_install":{"schema_version":1,"status":"direct","policy":"allow","install_mode":"single","target":"codex","command":"npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 --target codex","dry_run_command":"npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 --target codex --dry-run --json","runtime_commands":{"codex":"npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 --target codex","gemini":"npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 --target gemini","project":"npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79"},"prompt":"Install and make this TokRepo asset usable: \"Codex Security — AI-Powered Vulnerability Scanner by OpenAI\".\n\nPage: https://tokrepo.com/en/workflows/asset-e9f9cdd0\nUUID: e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79\nTarget adapter: codex\nPolicy/mode: allow / single\n\nRead these machine-facing entry points first:\n- metadata: https://tokrepo.com/metadata/asset-e9f9cdd0.json\n- install contract: https://tokrepo.com/install-contract/asset-e9f9cdd0.json\n- install plan: https://api.tokrepo.com/api/v1/tokenboard/workflows/install-plan?uuid=e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79&target=codex\n- raw content: https://tokrepo.com/raw/asset-e9f9cdd0\n\nCommands:\n- choose the current runtime; do not use unsupported CLI targets.\n- Codex: npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 --target codex\n- Gemini CLI: npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 --target gemini\n- Claude Code / project agent: run npx -y tokrepo@latest install e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 from the project root; add `--dry-run --json` first to inspect the plan.\n- add `--dry-run --json` to the chosen command first; after the plan allows it, run the chosen command.\n\nExecution rules:\n1. Run the dry-run command first to inspect the plan and risks.\n2. Run the install command after the plan allows it.\n3. Run the post_verify checks from the install plan.\n\nReport back with changed files, verification result, and how to use the asset next.","next_steps":["Run the dry-run command first to inspect the plan and risks.","Run the install command after the plan allows it.","Run the post_verify checks from the install plan."],"success_check":["The asset is installed into the target agent or project location.","The agent can load the entrypoint and explain how to use it."]},"agent_metadata":{"asset_kind":"skill","target_tools":["codex"],"install_mode":"single","entrypoint":"Codex Security Overview","risk_profile":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":false},"dependencies":{"npm":["@openai/codex-security"],"pip":[],"brew":[],"system":[]},"content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","verification":{"commands":[],"expected_files":["Codex Security Overview"]},"inferred":true},"agent_fit":{"target":"codex","score":98,"status":"native","policy":"allow","why":["target_tools includes codex","asset_kind skill","install_mode single","markdown-only","policy allow","safe markdown-only Codex install","trust established"],"asset_kind":"skill","install_mode":"single"},"trust":{"author_trust_level":"established","verified_publisher":false,"asset_signed_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","signature_status":"hash_only","install_count":0,"report_count":0,"dangerous_capability_badges":[],"review_status":"unreviewed","signals":["author has published assets","content hash available","no dangerous capability badges"]},"provenance":{"owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","owner_name":"AI Open Source","source_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","visibility":1,"created_at":"2026-09-11 17:19:39","updated_at":"2026-09-12 02:37:15"},"target_adapter":{"target":"codex","adapter":"skill-directory","root":"~/.codex/skills","entrypoint":"SKILL.md","manifest_path":"~/.codex/tokrepo/install-manifest.json","staging_root":"~/.codex/tokrepo/staged/e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","install_modes":["single","bundle","split","stage_only"],"activates_files":true},"install_plan":{"schema_version":2,"target":"codex","asset_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","asset_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","source_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","install_mode":"single","entrypoint":"Codex Security Overview","preconditions":[{"type":"target_supported","status":"pass","message":"codex install target is supported"},{"type":"install_root","status":"pass","message":"~/.codex/skills for activated assets; ~/.codex/tokrepo/staged/e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 for staged assets"},{"type":"target_tool_metadata","status":"pass","message":"metadata allows codex"},{"type":"content_hash","status":"pass","message":"asset metadata includes content_hash"},{"type":"trust_policy","status":"pass","message":"publisher trust level is established"},{"type":"policy_decision","status":"pass","message":"allow for e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79 (single)"}],"actions":[{"type":"write_file","path":"~/.codex/skills/tokrepo-asset-e9f9cdd0/SKILL.md","source_name":"Codex Security Overview","sha256":"7e9911cadb1425bcb4cf87040eb00954dc7eaa2c0adc8af595f414e22678b6a8","bytes":3023,"risk":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":false},"if_exists":"overwrite","entrypoint":true}],"policy_decision":{"decision":"allow","requires_confirmation":false,"reasons":["safe markdown-only Codex install"]},"requires_confirmation":false,"rollback":[{"type":"remove_file","path":"~/.codex/skills/tokrepo-asset-e9f9cdd0/SKILL.md"}],"post_verify":[{"type":"file_sha256","path":"~/.codex/skills/tokrepo-asset-e9f9cdd0/SKILL.md","sha256":"7e9911cadb1425bcb4cf87040eb00954dc7eaa2c0adc8af595f414e22678b6a8"}],"metadata":{"asset_kind":"skill","target_tools":["codex"],"install_mode":"single","entrypoint":"Codex Security Overview","risk_profile":{"executes_code":false,"modifies_global_config":false,"requires_secrets":[],"uses_absolute_paths":false,"network_access":false},"dependencies":{"npm":["@openai/codex-security"],"pip":[],"brew":[],"system":[]},"content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","verification":{"commands":[],"expected_files":["Codex Security Overview"]},"inferred":true},"agent_fit":{"target":"codex","score":98,"status":"native","policy":"allow","why":["target_tools includes codex","asset_kind skill","install_mode single","markdown-only","policy allow","safe markdown-only Codex install","trust established"],"asset_kind":"skill","install_mode":"single"},"trust":{"author_trust_level":"established","verified_publisher":false,"asset_signed_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","signature_status":"hash_only","install_count":0,"report_count":0,"dangerous_capability_badges":[],"review_status":"unreviewed","signals":["author has published assets","content hash available","no dangerous capability badges"]},"provenance":{"owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","owner_name":"AI Open Source","source_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","visibility":1,"created_at":"2026-09-11 17:19:39","updated_at":"2026-09-12 02:37:15"},"target_adapter":{"target":"codex","adapter":"skill-directory","root":"~/.codex/skills","entrypoint":"SKILL.md","manifest_path":"~/.codex/tokrepo/install-manifest.json","staging_root":"~/.codex/tokrepo/staged/e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","install_modes":["single","bundle","split","stage_only"],"activates_files":true},"evidence_bundle":{"acceptance_gate":{"recommended_action":"install_after_plan","rule":"Agents should only activate an asset after evidence_bundle.integrity, policy_compatibility, rollback, and post_verify have been inspected.","status":"pass"},"asset_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","asset_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","eval_evidence":["https://tokrepo.com/evals/install-safety.json","https://tokrepo.com/evals/trust-evidence-coverage.json","https://tokrepo.com/evals/handoff-quality.json"],"generated_at":"2026-09-11T18:37:16Z","integrity":{"content_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","declared_content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","file_count":1,"hash_algorithm":"sha256","install_plan_hash":"5fc7149404074b3ce82636004eee0fb62cec5ba7fa2c8fb72dadf65c682e7013"},"policy_compatibility":{"permission_envelope":{"destructive":false,"executes_code":false,"file_count":1,"filesystem_write":["~/.codex/skills"],"global_config_write":false,"network":false,"requires_secrets":[],"uses_absolute_paths":false},"policy_decision":{"decision":"allow","requires_confirmation":false,"reasons":["safe markdown-only Codex install"]},"requires_confirmation":false,"target":"codex","trust_score_v2":{"recommended_action":"install_after_plan","status":"trusted","trust_score":82}},"provenance":{"asset_kind":"skill","asset_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","asset_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","computed_bundle_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","created_at":"2026-09-11 17:19:39","generated_at":"2026-09-11T18:37:16Z","install_plan_hash":"5fc7149404074b3ce82636004eee0fb62cec5ba7fa2c8fb72dadf65c682e7013","owner_name":"AI Open Source","owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","parent_uuid":"","schema_version":2,"source":"tokrepo_asset","source_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","updated_at":"2026-09-12 02:37:15","visibility":1},"sbom":{"asset_kind":"skill","asset_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","asset_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","capability_flags":{"destructive":false,"executes_code":false,"modifies_global_config":false,"network_access":false,"requires_secrets":[]},"content_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","dependencies":{"brew":[],"mcp":[],"npm":["@openai/codex-security"],"pip":[],"system":[]},"files":[{"bytes":3023,"path":"~/.codex/skills/tokrepo-asset-e9f9cdd0/SKILL.md","role":"entrypoint","sha256":"7e9911cadb1425bcb4cf87040eb00954dc7eaa2c0adc8af595f414e22678b6a8","source_name":"Codex Security Overview"}],"format":"SBOM-lite","install_mode":"single","schema_version":1,"target":"codex"},"schema":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json","schema_version":1,"schemas":{"asset_verification":"https://tokrepo.com/schemas/asset-verification.schema.json","evidence_bundle":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json","install_plan":"https://tokrepo.com/schemas/install-plan.schema.json","provenance":"https://tokrepo.com/schemas/provenance.schema.json","sbom":"https://tokrepo.com/schemas/agent-evidence-bundle.schema.json#/properties/sbom"},"signature_evidence":{"content_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","hash_algorithm":"sha256","install_plan_hash":"5fc7149404074b3ce82636004eee0fb62cec5ba7fa2c8fb72dadf65c682e7013","schema_version":1,"signed_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","status":"hash_only","verification_notes":["hash_only evidence proves content integrity but not publisher identity unless an external signature verifies it"]},"source_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","target":"codex"},"sbom":{"asset_kind":"skill","asset_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","asset_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","capability_flags":{"destructive":false,"executes_code":false,"modifies_global_config":false,"network_access":false,"requires_secrets":[]},"content_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","dependencies":{"brew":[],"mcp":[],"npm":["@openai/codex-security"],"pip":[],"system":[]},"files":[{"bytes":3023,"path":"~/.codex/skills/tokrepo-asset-e9f9cdd0/SKILL.md","role":"entrypoint","sha256":"7e9911cadb1425bcb4cf87040eb00954dc7eaa2c0adc8af595f414e22678b6a8","source_name":"Codex Security Overview"}],"format":"SBOM-lite","install_mode":"single","schema_version":1,"target":"codex"},"signature_evidence":{"content_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","hash_algorithm":"sha256","install_plan_hash":"5fc7149404074b3ce82636004eee0fb62cec5ba7fa2c8fb72dadf65c682e7013","schema_version":1,"signed_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","status":"hash_only","verification_notes":["hash_only evidence proves content integrity but not publisher identity unless an external signature verifies it"]},"provenance_v2":{"asset_kind":"skill","asset_title":"Codex Security — AI-Powered Vulnerability Scanner by OpenAI","asset_uuid":"e9f9cdd0-adc1-11f1-9bc6-00163e2b0d79","computed_bundle_hash":"cee4ec448d93aec044f53b6811e860d81c061905d7217063141fc90883b15df0","content_hash":"e904d1b65aba0bb66ea401da80cde00cf23d4a1e011e14a7a308cbf3103a531d","created_at":"2026-09-11 17:19:39","generated_at":"2026-09-11T18:37:16Z","install_plan_hash":"5fc7149404074b3ce82636004eee0fb62cec5ba7fa2c8fb72dadf65c682e7013","owner_name":"AI Open Source","owner_uuid":"8a911193-3180-11f1-9bc6-00163e2b0d79","parent_uuid":"","schema_version":2,"source":"tokrepo_asset","source_url":"https://tokrepo.com/en/workflows/asset-e9f9cdd0","updated_at":"2026-09-12 02:37:15","visibility":1},"transitive_dependencies":null}}