autonomous-loop
Audited by Socket on Feb 23, 2026
1 alert found:
Obfuscated FileThis module is a scaffold generator (not obviously malware itself) but contains multiple high-risk constructs: unsanitized injection of template content into executable files (direct code injection vector), generation of a run loop that reads local state and sends it to an external assistant invoked with permissive flags (data exfiltration risk), and documentation encouraging automated commits and assistant configuration changes (persistence/privilege risk). Treat as potentially dangerous: do not run generated run_loop.sh or execute generated scripts without manual review and removal/sanitization of injected code and removal of any automatic exfiltration instructions. Validate TEMPLATES integrity from trusted sources and avoid sending local files to third-party assistants or disable 'dangerously-skip-permissions'.