frontend-ui-design

This file itself contains no direct malware patterns (no credential theft, no persistence, no obfuscated payloads, no explicit exfiltration commands). However, it is a high-impact orchestration wrapper: it delegates to `codex exec` with user-controlled prompt content and potentially permissive execution/network modes. The primary risks are (1) prompt-injection-driven unintended repository changes in fix mode, (2) security impact of permissive/overridden sandbox settings (including optional network-enabled tooling), and (3) caller-controlled file path writes via `--out` and reads via `--schema`/`--before` without allowlisting. Overall, treat as a tool-runner that is likely benign but requires review/hardening of downstream tooling and configuration controls.