🧰 Codex CLI

The items that name it 20

• [tl;dr sec] #351 - PHP2Shell, Autopatching Skills, AWS Pathrunner
  articleas tools2026-10-22

  OpenAI tool through which the backdoored model exfiltrated .env files and SSH keys in ProjectDiscovery's demonstration.

• Codex CLI installs a persistent, self-updating background daemon by default
  threadas classification.technologies2026-10-12
• 500B tokens later: Letting AI agents decompile a first-person shooter
  writeupas tools2026-10-11It is written here as Codex CLI (agent harness; Codex Pro subscription).

  agent harness; Codex Pro subscription

• | Blog | Endor Labs
  articleas affected products2026-10-06

  AI coding agent CLI using OS-level sandbox enforcement

• GPT-6.1 Sol on Codex: Astra-level security, a third faster, zero cheating | Blog | Endor Labs
  writeupas classification.technologies2026-10-02
• Top AI Coding Agent Security Resources — October 2026
  articleas affected products2026-10-02It is written here as Codex CLI (OpenAI).

  OpenAI

• GPT-6 Sol on Codex: average scores, quarter the cost | Blog | Endor Labs
  articleas tools2026-10-01It is written here as Codex CLI (OpenAI coding agent harness).

  OpenAI coding agent harness

• What is an agent harness (and how do you secure one)?
  articleas affected products2026-09-14

  AI coding agent harness; subject of OpenAI's harness engineering report; shares workspace between runs allowing compromised run to write AGENTS.md read by next run (Novee Security, Black Hat USA 2026)

• PlamenTSV/plamen
  repoas classification.technologies2026-09-07
• henrymao2004/Auto-research-red-teaming
  repoas tools2026-08-25

  part of the runtime stack; also used as a victim agent (codex)

• GhostSplice: Malicious MCP Servers Split Exfiltration to Bypass Guardrails
  articleas affected products2026-08-19

  Coding client tested; GPT-5.4 reached 100% compliance through it.

• We built an AI PR reviewer. The hard part was teaching it to say nothing.
  writeupas affected products2026-08-13It is written here as Codex CLI (installed from npm 'latest' tag).

  installed from npm 'latest' tag

• aurscan
  repoas tools2026-08-08

  Alternate LLM backend for aurscan (token/cost estimated, no temperature control)

• Critical Security Controls for Governing AI Coding Agents | Blog | Endor Labs
  articleas classification.technologies2026-07-31
• AI Security Briefing
  articleas classification.technologies2026-07-18
• Destructive Command Guard (dcg)
  repoas affected products2026-07-15

  First-class hook target; auto-configured by installer when codex on PATH or ~/.codex/ exists

• awesome-ai-security-tools
  repoas affected products2026-07-11

  AI coding agent covered by agent-audit, SkillSpector, Skill-Inject, and others

• Pantheon-Security/medusa
  repoas affected products2026-05-10It is written here as Codex CLI (.codex/config.toml).

  .codex/config.toml

• How abliterated models can get you pwned
  writeupas classification.technologies
• Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
  articleas affected products

In every workspace you can read 37