ralph-wiggum

No direct malware/backdoor behavior is present in this bash launcher itself, but it introduces substantial supply-chain and execution risk. The embedded default Dockerfile executes a remote installer script during docker build (curl | sh), and the launcher will also build from a project-provided Dockerfile when present. At runtime it bind-mounts and executes project-provided ./ralph.sh, and it may pass ANTHROPIC_API_KEY into the container environment. While runtime networking is disabled and container isolation is relatively strong, the dominant risks are build-time remote code execution and executing untrusted project content with optional secret exposure. Security depends heavily on trustworthiness of the target project directory contents and the integrity of the remote installer endpoint.