rules-codex

Codex 'Self-healing' mode activated. It will autonomously run tests and iterate on fixes.

Codex 'Self-healing' mode activated. It will autonomously run tests and iterate on fixes. Ensure iteration limits and manual review checkpoints are configured to prevent runaway loops or silent breakage.

Blocked 'Self-healing' attempt with forced dependency installation.

Blocked 'Self-healing' attempt with forced dependency installation. Force-installing dependencies bypasses lockfile integrity and can introduce supply chain risks. Review why the dependency resolution failed before allowing a force install.

Generated code is being evaluated or executed directly. Codex completions are untrusted strings — executing them without sandboxing and review enables arbitrary code execution. Display completions for user review, run in a locked-down sandbox, or apply a strict allowlist of safe AST patterns before execution.

Prompt injection pattern detected in Codex API input. Embedding instruction overrides in user-controlled text allows attackers to hijack the model's behaviour, bypass safety layers, and generate malicious code (CWE-77 prompt injection). Sanitize or refuse user input before passing it to the Codex API. Never interpolate raw user content into the system prompt.

Hardcoded secret passed to Codex prompt. Embedding real keys/passwords in prompts causes them to appear verbatim in completions, logs, and billing dashboards. Load credentials from environment variables or a secrets manager and never interpolate them into completion requests.

Generated Python code uses subprocess with shell=True and references a Codex completion. Passing model output to shell=True enables command injection — any shell metacharacter in the completion becomes an injection vector. Use shell=False with an argv list, or reject completions containing shell metacharacters.

Codex 'Self-healing' has exceeded the threshold of iterations. This could indicate an infinite loop.

Codex 'Self-healing' has exceeded the threshold of iterations. This could indicate an infinite loop or a fundamentally broken state. Stop the repair loop, investigate root cause, and restart from a known good state.

Codex is creating an autonomous Pull Request.

Codex is creating an autonomous Pull Request. Review the diff for unintended changes — Codex may silently alter unrelated files during self-healing or repair tasks.