deep-research

The fragment is an administrative task runner rather than apparent malware. It safely validates task identifiers and confines manifest-derived prompt, output, and log paths to the run directory, but it deliberately executes an external Codex process with full-auto workspace-write permissions. Enabling --network or supplying an untrusted --codex-bin, workspace, manifest, or prompt can result in arbitrary file changes or network activity by the child process. Concurrent tasks sharing one workspace also create isolation concerns. Review the executable provenance, prompts, workspace contents, and sandbox configuration before use with untrusted input.