📦
Audit History
email-notify - 9 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v9 Latest | Jul 23, 2026, 12:59 PM | 1 confirmed | 9 | No capability change |
| v8 | Jul 8, 2026, 04:03 AM | 1 confirmed | 41 | No capability change |
| v7 | Jul 5, 2026, 07:17 AM | 1 confirmed | 35 | Contains scripts |
| v6 | Jun 28, 2026, 08:18 PM | 4 confirmed | 1 | Contains scriptsExternal commands |
| v5 | Jan 16, 2026, 08:48 PM | No confirmed findings | 0 | No capability change |
| v4 | Jan 16, 2026, 08:48 PM | No confirmed findings | 0 | Contains scripts |
| v3 | Jan 8, 2026, 05:57 AM | No confirmed findings | 0 | No capability change |
| v2 | Jan 8, 2026, 05:57 AM | No confirmed findings | 0 | No capability change |
| v1 | Jan 8, 2026, 05:57 AM | No confirmed findings | 0 | Baseline |
Audit version 9 Latest
Jul 23, 2026, 12:59 PM
Most static alerts are false positives caused by Markdown formatting, local validation, and scoped configuration reads. Confirmed risks include shell-profile credential storage, optional unencrypted SMTP authentication, environment access to the SMTP password, and intended outbound SMTP connections.
2
Files scanned
282
Lines analyzed
14
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Authenticated SMTP Can Run Without Encryption
When both TLS options are disabled, the plain SMTP path still calls login. Network observers could capture SMTP credentials and notification content.
The plain SMTP client is created on line 194, while STARTTLS is conditional and login remains available. The control flow directly confirms the exposure condition.
Capability review items (9)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Email sending capability
client.login(smtp_user, smtp_password)
This transmits the configured SMTP username and password to the server. The credentials can cross an unencrypted connection when both transport-security options are disabled.
High
Hidden file in home directory
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup directs users to persist the SMTP password in a shell startup file. This exposes the credential to every child process and leaves it in a long-lived plaintext file.
High
Hidden file access
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The documented edit places SMTP credentials in .bashrc or .zshrc. Persisting secrets in shell profiles broadens credential exposure beyond this skill.
Medium
Email sending capability
client: smtplib.SMTP = smtplib.SMTP_SSL(
This creates an outbound SSL SMTP connection to the configured host. The connection is intended, but it is a real network and data-egress capability.
Medium
Email sending capability
smtp_host, smtp_port, timeout=args.timeout
This supplies the configured host and port to the SSL SMTP client. It is part of the real outbound connection path.
Medium
Email sending capability
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
This creates a plain SMTP connection before optional STARTTLS. It enables outbound traffic and can remain unencrypted when TLS is disabled.
Medium
Python email libraries
client: smtplib.SMTP = smtplib.SMTP_SSL(
This uses the Python SMTP library to create an outbound SSL connection. It is an actual network operation rather than a library reference.
Medium
Python email libraries
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
This uses the Python SMTP library to open a network connection. STARTTLS is optional, so this path can remain unencrypted.
Low
Python environment access
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
This reads a password from the process environment. The access is expected for SMTP authentication, but it gives the skill direct access to a credential.
Risk Factors
🌐 Network access (37)
scripts/send_email_notification.py:5 scripts/send_email_notification.py:89 scripts/send_email_notification.py:103 scripts/send_email_notification.py:104 scripts/send_email_notification.py:105 scripts/send_email_notification.py:106 scripts/send_email_notification.py:107 scripts/send_email_notification.py:108 scripts/send_email_notification.py:113 scripts/send_email_notification.py:114 scripts/send_email_notification.py:116 scripts/send_email_notification.py:119 scripts/send_email_notification.py:122 scripts/send_email_notification.py:125 scripts/send_email_notification.py:130 scripts/send_email_notification.py:132 scripts/send_email_notification.py:145 scripts/send_email_notification.py:173 scripts/send_email_notification.py:178 scripts/send_email_notification.py:179 scripts/send_email_notification.py:182 scripts/send_email_notification.py:190 scripts/send_email_notification.py:191 scripts/send_email_notification.py:194 scripts/send_email_notification.py:200 scripts/send_email_notification.py:201 scripts/send_email_notification.py:203 scripts/send_email_notification.py:5 scripts/send_email_notification.py:190 scripts/send_email_notification.py:194 scripts/send_email_notification.py:203 SKILL.md:3 SKILL.md:10 SKILL.md:20 SKILL.md:21 SKILL.md:30 SKILL.md:31
🔑 Env variables (8)
scripts/send_email_notification.py:71 scripts/send_email_notification.py:102 scripts/send_email_notification.py:103 scripts/send_email_notification.py:104 scripts/send_email_notification.py:105 scripts/send_email_notification.py:106 scripts/send_email_notification.py:107 scripts/send_email_notification.py:108
⚙️ External commands (12)
📁 Filesystem access (4)
Audited by: codex
Jul 8, 2026, 04:03 AM
The skill intentionally sends SMTP email through user-configured settings and reads SMTP credentials from environment variables. I confirmed the outbound email capability and shell-profile credential guidance, and dismissed markdown backtick and system reconnaissance matches as false positives.
2
Files scanned
282
Lines analyzed
46
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Plaintext SMTP Credential Storage Guidance
The setup guide recommends exporting SMTP settings, including CODEX_EMAIL_PASSWORD, from shell startup files. This can persist an email password in plaintext and expose it to future shell sessions.
SKILL.md directs users to edit ~/.bashrc or ~/.zshrc and includes CODEX_EMAIL_PASSWORD in the exported variables. That is clear evidence of plaintext credential storage guidance.
Capability review items (41)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup instructions direct users to put exported SMTP settings, including an email password, in shell startup files. This can persist sensitive credentials in plaintext in hidden home-directory files.
Medium
Email sending capability
import smtplib
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
description="Send an SMTP email notification for a Codex task."
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_host = os.environ.get("CODEX_EMAIL_SMTP_HOST")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_port_raw = os.environ.get("CODEX_EMAIL_SMTP_PORT", "587")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_user = os.environ.get("CODEX_EMAIL_USERNAME")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_from = os.environ.get("CODEX_EMAIL_FROM")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_to_raw = os.environ.get("CODEX_EMAIL_TO")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
if not smtp_host:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
sys.stderr.write("Missing CODEX_EMAIL_SMTP_HOST.\n")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
if not smtp_from:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
if not smtp_to_raw:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
if smtp_user and not smtp_password:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
if smtp_password and not smtp_user:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_port = int(smtp_port_raw)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
sys.stderr.write("CODEX_EMAIL_SMTP_PORT must be an integer.\n")
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
recipients = _split_recipients(smtp_to_raw)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
msg["From"] = smtp_from
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
print("SMTP host:", smtp_host)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
print("SMTP port:", smtp_port)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
print("from:", smtp_from)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
client: smtplib.SMTP = smtplib.SMTP_SSL(
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
smtp_host, smtp_port, timeout=args.timeout
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
if smtp_user:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
client.login(smtp_user, smtp_password)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
except smtplib.SMTPException as exc:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Python email libraries
import smtplib
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Python email libraries
client: smtplib.SMTP = smtplib.SMTP_SSL(
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Python email libraries
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Python email libraries
except smtplib.SMTPException as exc:
The helper implements outbound SMTP email and can send task metadata and summaries to configured recipients. This is intended behavior, but it is a real network data-transfer capability.
Medium
Email sending capability
description: Send SMTP email notifications after Codex completes a task. Use when one Codex or Claud
The documentation instructs users to configure SMTP email delivery for task notifications. This confirms the skill has intentional outbound email behavior.
Medium
Email sending capability
Send an email notification after each Codex task. Use the helper script to resolve the project name
The documentation instructs users to configure SMTP email delivery for task notifications. This confirms the skill has intentional outbound email behavior.
Medium
Email sending capability
export CODEX_EMAIL_SMTP_HOST="smtp.example.com"
The documentation instructs users to configure SMTP email delivery for task notifications. This confirms the skill has intentional outbound email behavior.
Medium
Email sending capability
export CODEX_EMAIL_SMTP_PORT="587"
The documentation instructs users to configure SMTP email delivery for task notifications. This confirms the skill has intentional outbound email behavior.
Medium
Email sending capability
If your SMTP server does not require auth, leave `CODEX_EMAIL_USERNAME` and `CODEX_EMAIL_PASSWORD` u
The documentation instructs users to configure SMTP email delivery for task notifications. This confirms the skill has intentional outbound email behavior.
Medium
Email sending capability
Set `CODEX_EMAIL_USE_SSL` to `true` for SMTPS (typically port 465) and `CODEX_EMAIL_USE_TLS` to `tru
The documentation instructs users to configure SMTP email delivery for task notifications. This confirms the skill has intentional outbound email behavior.
Medium
Hidden file access
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup instructions direct users to put exported SMTP settings, including an email password, in shell startup files. This can persist sensitive credentials in plaintext in hidden home-directory files.
Low
Python environment access
smtp_user = os.environ.get("CODEX_EMAIL_USERNAME")
The script reads SMTP account credentials from environment variables. This is expected for SMTP login, but access to credential material is security-sensitive.
Low
Python environment access
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
The script reads SMTP account credentials from environment variables. This is expected for SMTP login, but access to credential material is security-sensitive.
Risk Factors
🌐 Network access (37)
scripts/send_email_notification.py:5 scripts/send_email_notification.py:89 scripts/send_email_notification.py:103 scripts/send_email_notification.py:104 scripts/send_email_notification.py:105 scripts/send_email_notification.py:106 scripts/send_email_notification.py:107 scripts/send_email_notification.py:108 scripts/send_email_notification.py:113 scripts/send_email_notification.py:114 scripts/send_email_notification.py:116 scripts/send_email_notification.py:119 scripts/send_email_notification.py:122 scripts/send_email_notification.py:125 scripts/send_email_notification.py:130 scripts/send_email_notification.py:132 scripts/send_email_notification.py:145 scripts/send_email_notification.py:173 scripts/send_email_notification.py:178 scripts/send_email_notification.py:179 scripts/send_email_notification.py:182 scripts/send_email_notification.py:190 scripts/send_email_notification.py:191 scripts/send_email_notification.py:194 scripts/send_email_notification.py:200 scripts/send_email_notification.py:201 scripts/send_email_notification.py:203 scripts/send_email_notification.py:5 scripts/send_email_notification.py:190 scripts/send_email_notification.py:194 scripts/send_email_notification.py:203 SKILL.md:3 SKILL.md:10 SKILL.md:20 SKILL.md:21 SKILL.md:30 SKILL.md:31
🔑 Env variables (8)
scripts/send_email_notification.py:71 scripts/send_email_notification.py:102 scripts/send_email_notification.py:103 scripts/send_email_notification.py:104 scripts/send_email_notification.py:105 scripts/send_email_notification.py:106 scripts/send_email_notification.py:107 scripts/send_email_notification.py:108
⚙️ External commands (12)
📁 Filesystem access (4)
Audited by: codex
Jul 5, 2026, 07:17 AM
The skill legitimately sends SMTP messages and reads environment variables for SMTP configuration, including credentials. Most SKILL.md shell/backtick detections are Markdown or setup examples, but storing SMTP credentials in shell startup files is a real concern. No prompt injection text or unauthorized exfiltration intent was found beyond the configured email notification behavior.
2
Files scanned
282
Lines analyzed
40
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Plaintext SMTP Credential Storage Guidance
The setup instructions tell users to place CODEX_EMAIL_PASSWORD in shell startup files. This can persist SMTP credentials in plaintext dotfiles.
SKILL.md explicitly shows CODEX_EMAIL_PASSWORD in the shell profile export block. The storage risk follows directly from the documented setup.
Capability review items (35)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Hidden file in home directory
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup instructions direct users to place notification settings in shell startup dotfiles. This can persist plaintext SMTP credentials in hidden home-directory files.
High
Hidden file access
Add the following lines to `~/.bashrc` (Linux) or `~/.zshrc` (macOS):
The setup instructions direct users to place notification settings in shell startup dotfiles. This can persist plaintext SMTP credentials in hidden home-directory files.
Medium
Email sending capability
import smtplib
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
description="Send an SMTP email notification for a Codex task."
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_host = os.environ.get("CODEX_EMAIL_SMTP_HOST")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_port_raw = os.environ.get("CODEX_EMAIL_SMTP_PORT", "587")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_user = os.environ.get("CODEX_EMAIL_USERNAME")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_from = os.environ.get("CODEX_EMAIL_FROM")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
smtp_to_raw = os.environ.get("CODEX_EMAIL_TO")
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
recipients = _split_recipients(smtp_to_raw)
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
msg["From"] = smtp_from
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
client: smtplib.SMTP = smtplib.SMTP_SSL(
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Email sending capability
smtp_host, smtp_port, timeout=args.timeout
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Email sending capability
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Email sending capability
if smtp_user:
This line configures or constructs the SMTP notification path. It supports sending task status and summary data outside the local workspace.
Medium
Email sending capability
client.login(smtp_user, smtp_password)
This line participates directly in SMTP connection, authentication, or delivery. The skill can send task data to an external mail server.
Medium
Python email libraries
import smtplib
The script imports and uses smtplib to create SMTP or SMTPS clients. That is direct network email functionality.
Medium
Python email libraries
client: smtplib.SMTP = smtplib.SMTP_SSL(
The script imports and uses smtplib to create SMTP or SMTPS clients. That is direct network email functionality.
Medium
Python email libraries
client = smtplib.SMTP(smtp_host, smtp_port, timeout=args.timeout)
The script imports and uses smtplib to create SMTP or SMTPS clients. That is direct network email functionality.
Medium
Ruby/shell backtick execution
```bash
The workflow includes a shell command that runs the Python notification helper. The command is expected, but it executes local code and passes user-controlled task text as arguments.
Medium
Email sending capability
description: Send SMTP email notifications after Codex completes a task. Use when one Codex or Claud
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
Send an email notification after each Codex task. Use the helper script to resolve the project name
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
export CODEX_EMAIL_SMTP_HOST="smtp.example.com"
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
export CODEX_EMAIL_SMTP_PORT="587"
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
If your SMTP server does not require auth, leave `CODEX_EMAIL_USERNAME` and `CODEX_EMAIL_PASSWORD` u
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Medium
Email sending capability
Set `CODEX_EMAIL_USE_SSL` to `true` for SMTPS (typically port 465) and `CODEX_EMAIL_USE_TLS` to `tru
The documentation instructs users to configure SMTP delivery settings. This confirms expected email-sending behavior and a real external data transmission path.
Low
Python environment access
value = os.environ.get(name)
The helper reads named environment values for TLS and SSL options. Access is limited to configured names, but environment access is real.
Low
Python environment access
machine_name = os.environ.get("CODEX_MACHINE_NAME")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_host = os.environ.get("CODEX_EMAIL_SMTP_HOST")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_port_raw = os.environ.get("CODEX_EMAIL_SMTP_PORT", "587")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_user = os.environ.get("CODEX_EMAIL_USERNAME")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_password = os.environ.get("CODEX_EMAIL_PASSWORD")
The script reads CODEX_EMAIL_PASSWORD from the environment for SMTP login. This is expected, but it gives the skill process access to an email credential.
Low
Python environment access
smtp_from = os.environ.get("CODEX_EMAIL_FROM")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Low
Python environment access
smtp_to_raw = os.environ.get("CODEX_EMAIL_TO")
The script reads named CODEX email and machine settings from the environment. This is legitimate configuration access, but it can include sensitive SMTP details.
Risk Factors
🌐 Network access (37)
scripts/send_email_notification.py:5 scripts/send_email_notification.py:89 scripts/send_email_notification.py:103 scripts/send_email_notification.py:104 scripts/send_email_notification.py:105 scripts/send_email_notification.py:106 scripts/send_email_notification.py:107 scripts/send_email_notification.py:108 scripts/send_email_notification.py:113 scripts/send_email_notification.py:114 scripts/send_email_notification.py:116 scripts/send_email_notification.py:119 scripts/send_email_notification.py:122 scripts/send_email_notification.py:125 scripts/send_email_notification.py:130 scripts/send_email_notification.py:132 scripts/send_email_notification.py:145 scripts/send_email_notification.py:173 scripts/send_email_notification.py:178 scripts/send_email_notification.py:179 scripts/send_email_notification.py:182 scripts/send_email_notification.py:190 scripts/send_email_notification.py:191 scripts/send_email_notification.py:194 scripts/send_email_notification.py:200 scripts/send_email_notification.py:201 scripts/send_email_notification.py:203 scripts/send_email_notification.py:5 scripts/send_email_notification.py:190 scripts/send_email_notification.py:194 scripts/send_email_notification.py:203 SKILL.md:3 SKILL.md:10 SKILL.md:20 SKILL.md:21 SKILL.md:30 SKILL.md:31
🔑 Env variables (8)
scripts/send_email_notification.py:71 scripts/send_email_notification.py:102 scripts/send_email_notification.py:103 scripts/send_email_notification.py:104 scripts/send_email_notification.py:105 scripts/send_email_notification.py:106 scripts/send_email_notification.py:107 scripts/send_email_notification.py:108
⚙️ External commands (12)
📁 Filesystem access (4)
Audited by: codex
Jun 28, 2026, 08:18 PM
Static findings for network, environment access, filesystem references, and documented commands are mostly expected for an SMTP notification skill. No prompt injection or malicious intent was found, but the skill can email task summaries and uses SMTP credentials from environment variables, so users need a clear data disclosure warning.
2
Files scanned
282
Lines analyzed
10
Review items
3
False positives ignored
Confirmed security concerns (4)
Medium
Task Summary Can Be Sent Over SMTP
The helper sends email through smtplib and includes the task title, status, project, device name, and summary. This is the intended feature, but it can disclose sensitive task details if the summary contains secrets or private project information.
The script directly constructs an email body from task metadata and sends it through SMTP. This confirms network transmission, while the purpose appears legitimate and user configured.
Medium
SMTP Credentials Are Read From Environment Variables
The script reads SMTP host, username, password, sender, recipients, and TLS settings from environment variables. This is normal for SMTP configuration, but credentials can be exposed if shell profiles or logs are mishandled.
The code clearly reads CODEX_EMAIL_PASSWORD and uses it for SMTP login. The behavior is required for authenticated SMTP, but it handles sensitive credentials.
Medium
Plaintext Email Password Configuration Is Recommended
The instructions tell users to place CODEX_EMAIL_PASSWORD in shell startup files. This is easy to use but increases exposure to local users, backups, terminal history, and accidental sharing.
The documentation explicitly recommends persistent environment variables in home shell configuration files. The risk is credential exposure, not malicious behavior.
Low
AGENTS.md Project Name Read Is Limited
The script searches upward for AGENTS.md and reads it to extract a project name. This is filesystem access, but it is limited to project metadata and no file contents are emailed except the extracted name.
The filesystem access is explicit and narrow. It could reveal a project name in email, but I did not find evidence of broader file exfiltration.
Needs review findings (1)
These findings came from uncertain legacy audit verdicts, so they require review but are not counted as confirmed security issues.
Low
Hidden Home Path References Are Installation Documentation
The skill mentions shell startup files and a ~/.codex skill path. These references are expected for local configuration, but users should protect files containing credentials.
The references are documentation rather than hidden-file reads by code. They still matter because the documented files may store SMTP credentials.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Documented Command Is Not Dynamic Shell Execution
The command in SKILL.md is a user-facing example for running the helper script. I did not find code that builds or executes shell commands dynamically.
The flagged content is a Markdown command example, not executable code inside the skill. The Python script uses argparse and smtplib, not subprocess or shell evaluation.
Low
Weak Cryptography Finding Is Not Supported By Evidence
The weak cryptography static finding appears to be triggered by SMTP text, not by a weak hash, cipher, or custom cryptographic implementation. The script uses standard SMTP, SMTP_SSL, and STARTTLS controls.
No weak algorithm or cryptographic primitive is present at the flagged locations. The remaining concern is configuration quality, especially if users disable TLS and SSL.
Low
System Reconnaissance Finding Is Not Supported By Evidence
The flagged lines validate boolean environment values and tell users to avoid secrets in summaries. I did not find host probing, process listing, network scanning, or system inventory collection.
The code only parses configured environment flags and formats user-provided task metadata. No reconnaissance behavior is visible in the reviewed files.
Risk Factors
⚡ Contains scripts (1)
🌐 Network access (2)
🔑 Env variables (3)
📁 Filesystem access (3)
⚙️ External commands (1)
Detected Patterns
Network Transmission With User-Supplied SummaryCredential Use For Outbound SMTP
Audited by: codex
Jan 16, 2026, 08:48 PM
This skill is a straightforward SMTP email notification utility. It reads environment variables for SMTP configuration, reads AGENTS.md for optional project name extraction, and sends task completion notifications via standard Python smtplib. All detected patterns are expected functionality - email sending is the stated purpose, environment access is for configuration, and filesystem reads are for project name resolution. No malicious behavior confirmed.
3
Files scanned
521
Lines analyzed
3
Review items
0
False positives ignored
Risk Factors
🌐 Network access (1)
🔑 Env variables (1)
📁 Filesystem access (1)
Audited by: claude
Jan 16, 2026, 08:48 PM
This skill is a straightforward SMTP email notification utility. It reads environment variables for SMTP configuration, reads AGENTS.md for optional project name extraction, and sends task completion notifications via standard Python smtplib. All detected patterns are expected functionality - email sending is the stated purpose, environment access is for configuration, and filesystem reads are for project name resolution. No malicious behavior confirmed.
3
Files scanned
521
Lines analyzed
3
Review items
0
False positives ignored
Risk Factors
🌐 Network access (1)
🔑 Env variables (1)
📁 Filesystem access (1)
Audited by: claude
Jan 8, 2026, 05:57 AM
This skill is a straightforward SMTP email notification script. It reads environment variables and AGENTS.md for configuration, then sends task completion notifications via SMTP. No malicious behavior detected. The code matches its stated purpose of sending email notifications.
2
Files scanned
282
Lines analyzed
4
Review items
0
False positives ignored
Risk Factors
⚡ Contains scripts (1)
🌐 Network access (1)
📁 Filesystem access (1)
🔑 Env variables (2)
Audited by: claude
Jan 8, 2026, 05:57 AM
This skill is a straightforward SMTP email notification script. It reads environment variables and AGENTS.md for configuration, then sends task completion notifications via SMTP. No malicious behavior detected. The code matches its stated purpose of sending email notifications.
2
Files scanned
282
Lines analyzed
4
Review items
0
False positives ignored
Risk Factors
⚡ Contains scripts (1)
🌐 Network access (1)
📁 Filesystem access (1)
🔑 Env variables (2)
Audited by: claude
Jan 8, 2026, 05:57 AM
This skill is a straightforward SMTP email notification script. It reads environment variables and AGENTS.md for configuration, then sends task completion notifications via SMTP. No malicious behavior detected. The code matches its stated purpose of sending email notifications.
2
Files scanned
282
Lines analyzed
4
Review items
0
False positives ignored
Risk Factors
⚡ Contains scripts (1)
🌐 Network access (1)
📁 Filesystem access (1)
🔑 Env variables (2)
Audited by: claude