loki-mode

SUSPICIOUS: the skill is not overt malware and its lone external install path is official and verifiable, but it is a high-autonomy orchestration skill that pushes the agent to act without confirmation across coding, testing, browser automation, and state persistence. The main risk is excessive autonomous real-world action scope, not credential theft or covert exfiltration.

The fragment implements a legitimate-looking autonomous coding/orchestration system, but its default operating model is high autonomy: it repeatedly invokes Claude Code with broad repository and command-execution authority and explicitly discourages confirmation or stopping. The main security concern is unsafe delegation and incomplete enforcement of the advertised sandbox, path, and command-blocking controls, not evidence of embedded malware or data exfiltration. Cross-project learning persistence and unescaped log construction create additional privacy and integrity concerns. The visible code contains no clear malicious payload, credential theft, suspicious network destination, or destructive action.

The fragment documents a high-privilege autonomous development and deployment system, not malware. Its main security concern is operational risk from unattended agent actions combined with internet access, cloud credentials, persistent retries, and execution of an unpinned npm package. No direct malicious behavior or explicit credential theft is evidenced in this portion. The system should use least-privilege credentials, pinned and verified dependencies, sandboxing, explicit deployment approvals, and bounded autonomy.

This code is highly unsafe because it builds a Python expression string from caller-controlled `operator` and `operand` values and passes it directly to `eval()`. Without strict allowlisting of operators and strict numeric validation of operands, it enables arbitrary code execution (RCE) in the Python process. Treat as critical security risk and avoid using in any context where inputs can be influenced by an attacker.