spec-implement

The fragment is workflow documentation, not an evident malware payload. It does, however, explicitly recommend launching coding agents with approval and sandbox protections disabled in the cmux fallback. Following those instructions can expose the repository and execution environment to unintended changes or commands, so that launch guidance is a significant security concern.