story-setup

This module is a hook runner that automatically executes repository-local scripts (run-story-hook.sh/.cmd) for multiple workflow phases. While the snippet contains no explicit credential theft or network exfiltration, it creates a direct arbitrary code execution pathway sourced from repository filesystem content and uses PowerShell with -ExecutionPolicy Bypass on Windows, increasing the impact of a compromised or malicious hook script. Risk is primarily driven by the integrity and trustworthiness of the .codex/hooks/run-story-hook.* files and the correctness of ROOT resolution/traversal behavior.