codex-thread-orchestrator

This configuration sets up an automated `SessionStart` hook (gated by matcher `compact`) that executes a Python script from a user-local, hidden directory under `$HOME/.agents/...`. While the snippet alone shows no explicit malware indicators, it creates a high-impact process-execution path into mutable local filesystem content without any visible integrity checks. Treat as suspicious until the referenced Python script and any verification/permissions are confirmed.