codex-write-prose-fix

No clear malware behavior is evident. The significant risk is arbitrary command execution through `eval` on the optional lint command. This is potentially intentional for a caller-supplied command, but unsafe if that input can be influenced by an untrusted party; a direct argument-based invocation would be safer.