Codex Native Scheduler

• Outcome: Pass
• Latest audit: Jul 27, 2026 · 6:09 PM UTC
• Version: 0.1.0

Overview

This skill transparently creates user-controlled native scheduled Codex jobs, with persistence and command execution that match its stated purpose.

Install this only if you intentionally want Codex tasks to run later or recur using your local Codex login and policy settings. Review each job's prompt, working directory, schedule, profile/config overrides, captured environment variables, and retention settings before creating it; prefer worktree mode for jobs that may write files and avoid capturing secrets unless necessary.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Rogue Agent: Self-Modification, Session Persistence
• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (3)

subprocess module call

Medium

• Category: Dangerous Code Execution

Content

stdout_path.open("w", encoding="utf-8") as stdout_handle,
                stderr_path.open("w", encoding="utf-8") as stderr_handle,
            ):
                process = subprocess.Popen(
                    command,
                    cwd=cwd,
                    env=environment,

• Confidence: 83% confidence
• Finding: process = subprocess.Popen( command, cwd=cwd, env=environment, stdin=subprocess.PIPE,

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 95% confidence
• Finding: The skill describes capabilities that can read environment variables, read and write files, and invoke shell commands, but it does not declare corresponding permissions. That creates a transparency and policy-enforcement gap: operators may approve or run the skill without understanding its effective access, and downstream tooling cannot reliably gate risky behavior.

Session Persistence

Medium

• Category: Rogue Agent

Content

---
name: codex-native-scheduler
description: Schedule, inspect, retry, pause, resume, stop, and decommission unattended Codex CLI jobs through macOS launchd, Linux systemd user timers, or Windows Task Scheduler. Use when the user wants Codex to run later or recur without a resident daemon, or needs to manage jobs created by codex-schedule.
---

# Codex Native Scheduler

• Confidence: 88% confidence
• Finding: systemd user timers, or Windows Task Scheduler. Use when the user wants Codex to run later or recur without a resident daemon, or needs to manage jobs create

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.