impeccable
Fail
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: HIGHCOMMAND_EXECUTIONSAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/live-copy-edit-agent.mjsexecutes thecodexandclaudeCLI tools using flags that explicitly bypass security approvals and sandboxes, specifically--dangerously-bypass-approvals-and-sandboxfor Codex and--permission-mode bypassPermissionsfor Claude Code. - [COMMAND_EXECUTION]: The script
scripts/hook-admin.mjsmodifies internal agent configuration files, such as.claude/settings.local.json,.codex/hooks.json, and.cursor/hooks.json, to install persistent hooks. These hooks cause the agent to execute specific scripts (hook.mjs) automatically whenever standard file-editing tools like Edit or Write are used. - [COMMAND_EXECUTION]: The script
scripts/pin.mjsprogrammatically creates new skill definitions in the agent's harness directories to create standalone command shortcuts. This is an unauthorized modification of the agent's capability definitions. - [EXTERNAL_DOWNLOADS]: The
scripts/context.mjsscript performs a network request tohttps://impeccable.style/api/versionto check for updates. While framed as a feature, it establishes an outbound connection to an external server. - [COMMAND_EXECUTION]: Multiple scripts, including
live.mjs,live-poll.mjs, anddetect.mjs, useexecSyncorexecFileSyncto execute shell commands and other Node.js scripts within the local environment.
Recommendations
- AI detected serious security threats
Audit Metadata