Security checks across malware telemetry and agentic risk
This is a powerful always-on coding autopilot whose core behavior is disclosed, but it can auto-approve permissions, run project commands, control agents, notify external services, and merge code with limited confirmation.
Install only in trusted, isolated repositories after reviewing the scripts and config. Disable or remove automatic permission approval, branch auto-merge, yolo/full-auto modes, repository-defined shell checks, Claude fallback, and external notifications unless you explicitly need them. Use private Telegram/Discord channels, least-privilege tokens, and keep this away from secrets or production branches until you have verified the behavior.
short_cmd = cmd if len(cmd) <= 50 else cmd[:47] + "..."
try:
result = subprocess.run(
cmd,
shell=True,
capture_output=True,single_line = reply.replace('\n', ' ').replace('\r', ' ').strip()
# 使用 -l (literal) 避免特殊字符被解释
result = subprocess.run(
[tmux, 'send-keys', '-t', f'{TMUX_SESSION}:{window_name}',
'-l', single_line],
capture_output=True, text=True, timeout=10time.sleep(0.1)
# 发送 Enter
result = subprocess.run(
[tmux, 'send-keys', '-t', f'{TMUX_SESSION}:{window_name}',
'Enter'],
capture_output=True, text=True, timeout=5try:
cmd = [codex, 'exec', 'resume', session_id, reply, '--full-auto']
process = subprocess.Popen(
cmd,
stdout=subprocess.DEVNULL,
stderr=subprocess.PIPE,'-n', name, '-c', project_dir],
capture_output=True, timeout=5
)
subprocess.run(
[tmux, 'send-keys', '-t', f'{TMUX_SESSION}:{name}',
codex_cmd, 'Enter'],
capture_output=True, timeout=5'-n', name, '-c', project_dir],
capture_output=True, timeout=5
)
subprocess.run(
[tmux, 'send-keys', '-t', f'{TMUX_SESSION}:{name}',
codex_cmd, 'Enter'],
capture_output=True, timeout=5ax_helper = _get_ax_helper()
if ax_helper and window.title:
try:
result = subprocess.run(
[ax_helper, 'activate', window.title],
capture_output=True, text=True, timeout=5
)'''
try:
result = subprocess.run(
['osascript', '-e', script],
capture_output=True, text=True, timeout=5
)run_args: Any = command
else:
run_args = command_list if command_list else shlex.split(command)
proc = subprocess.run(
run_args,
cwd=str(cwd),
shell=use_shell,67/67 vendors flagged this skill as clean.