Security checks across malware telemetry and agentic risk
Night Shift is a disclosed autonomous coding runner, but it grants broad unattended execution and repository mutation authority with weak containment and an external-repo copying workflow that users should review carefully.
Install only in a disposable or low-risk git workspace first. Review every queued plan and generated phase before approval, avoid `plan steal` unless you own or are licensed to reuse the source, keep production credentials out of the runner environment, prefer dry-run, and inspect reports/diffs before merging. Do not run it unattended against sensitive repositories until workspace paths, runner binaries, stored logs, and cleanup behavior are locked down.
duration_seconds=0,
execution_method="shell",
)
result = subprocess.run(
args,
cwd=worktree_path,
capture_output=True,try:
# Run Cursor CLI
result = subprocess.run(
[
str(CURSOR_CLI),
"-p", str(prompt_file),if not module:
return True, "No module specified (skipping)"
result = subprocess.run(
[
"python3",
"-c",)
try:
result = subprocess.run(
args,
cwd=worktree,
capture_output=True,WORKTREES_DIR.mkdir(parents=True, exist_ok=True)
# Now safe to delete the branch
subprocess.run(
["git", "branch", "-D", branch], cwd=WORKSPACE, capture_output=True, text=True
))
# Create worktree with new branch
result = subprocess.run(
["git", "worktree", "add", "-b", branch, str(worktree_path), base_branch],
cwd=WORKSPACE,
capture_output=True,subprocess.run(
["chmod", "o+x", str(dir_path)], capture_output=True, text=True
)
subprocess.run(
["chown", "-R", "coder:coder", str(worktree_path)],
capture_output=True,
text=True,capture_output=True,
text=True,
)
subprocess.run(
["chmod", "-R", "755", str(worktree_path)], capture_output=True, text=True
)# Allow root to run git commands on coder-owned worktree
# (git refuses "dubious ownership" otherwise)
subprocess.run(
["git", "config", "--global", "--add", "safe.directory", str(worktree_path)],
capture_output=True,
text=True,message = f"Phase {phase_id}: {title}"
# Stage all changes
subprocess.run(
["git", "add", "-A"], cwd=worktree_path, capture_output=True, text=True
)# Commit (skip pre-commit hooks — worktree has full repo copy which
# triggers skill/cron validation hooks on unrelated files)
result = subprocess.run(
["git", "commit", "-m", message, "--allow-empty", "--no-verify"],
cwd=worktree_path,
capture_output=True,return False
# Reset to previous commit
subprocess.run(
["git", "reset", "--hard", "HEAD~1"],
cwd=worktree_path,
capture_output=True,)
# Clean untracked files
subprocess.run(
["git", "clean", "-fd"], cwd=worktree_path, capture_output=True, text=True
)# Clean up existing worktree if present (must remove BEFORE deleting branch)
if worktree_path.exists():
subprocess.run(
["git", "worktree", "remove", str(worktree_path), "--force"],
cwd=WORKSPACE,
capture_output=True,worktree_path = WORKTREES_DIR / plan_id
if worktree_path.exists():
result = subprocess.run(
["git", "worktree", "remove", str(worktree_path), "--force"],
cwd=WORKSPACE,
capture_output=True,try:
# Call unified-router, which routes to GLM-5.1/Cursor/Opus
result = subprocess.run(
["bash", router_bin, phase_prompt],
capture_output=True,
text=True,try:
# Run Cursor CLI
result = subprocess.run(
[
str(CURSOR_CLI),
"-p", str(prompt_file),64/64 vendors flagged this skill as clean.