Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed local Codex session-management tool with destructive capabilities, but it scopes them to Codex session storage and requires previews or explicit confirmation for writes.
Before installing, understand that this tool can modify or permanently remove local Codex session history when confirmed. Use preview mode first, prefer trash over permanent delete, verify the selected Codex root, and review npm dependency updates as you would for any globally installed CLI.
The manifest advertises destructive capabilities such as delete, trash, restore, purge, and cleanup without any user-facing warning that these actions may permanently remove or alter local session data. In combination with implicit invocation, this increases the chance of accidental data loss because users are not alerted to the consequences before the skill is selected or used.
The default prompt is broad enough to match generic 'session' requests and automatically route them to a skill that can inspect, delete, purge, or otherwise modify local Codex session data. Because the manifest does not constrain invocation to clearly local/session-store-specific tasks, users may trigger sensitive filesystem-affecting operations without realizing this skill is being applied.
该文件整体内容为中文，仅在 L006 提供英文 README 的链接，但文件本身未说明这是可选语言版本，也未在面向 AI Agent 的说明中提供语言偏好选择。按规则，若技能以自然语言强制特定语言而无用户 opt-in，可视为语言/locale 政策风险。
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"test": "vitest run"
},
"dependencies": {
"@modelcontextprotocol/sdk": "^1.17.5",
"better-sqlite3": "^12.6.2",
"zod": "^4.1.12"
},
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
},
"dependencies": {
"@modelcontextprotocol/sdk": "^1.17.5",
"better-sqlite3": "^12.6.2",
"zod": "^4.1.12"
},
"devDependencies": {
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"dependencies": {
"@modelcontextprotocol/sdk": "^1.17.5",
"better-sqlite3": "^12.6.2",
"zod": "^4.1.12"
},
"devDependencies": {
"@types/better-sqlite3": "^7.6.13",
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"zod": "^4.1.12"
},
"devDependencies": {
"@types/better-sqlite3": "^7.6.13",
"@types/node": "^24.3.0",
"typescript": "^6.0.2",
"vitest": "^4.1.2"
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
},
"devDependencies": {
"@types/better-sqlite3": "^7.6.13",
"@types/node": "^24.3.0",
"typescript": "^6.0.2",
"vitest": "^4.1.2"
}
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"devDependencies": {
"@types/better-sqlite3": "^7.6.13",
"@types/node": "^24.3.0",
"typescript": "^6.0.2",
"vitest": "^4.1.2"
}
}
Dependencies lack version pinning, allowing potential malicious package updates. Consider pinning versions.
"@types/better-sqlite3": "^7.6.13",
"@types/node": "^24.3.0",
"typescript": "^6.0.2",
"vitest": "^4.1.2"
}
}
Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits.
No suspicious patterns detected.