registry / codex-anywhere / 0.5.0

codex-anywhere@0.5.0

Telegram-native Codex client for background use anywhere

AI Security Review

scanned 17h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs codex-anywhere connect or installs/starts its explicit background service; a Telegram user sends /start.

Impact

An unintended first Telegram user can direct Codex actions and request files within the configured workspace.

Mechanism

Telegram-to-local-Codex bridge with first-user pairing and workspace file transfer

Rationale

No automatic lifecycle execution, credential harvesting, or non-package-aligned exfiltration was found. The unauthenticated first-user pairing and remote Codex capability warrant a warning.

Evidence

package.jsondist/cli.jsdist/bridge.jsdist/telegram.jsdist/service.jsdist/onboarding.js$XDG_CONFIG_HOME/codex-anywhere/config.json$HOME/Library/LaunchAgents/ai.mempat.codex-anywhere.*.plist$XDG_CONFIG_HOME/systemd/user/ai.mempat.codex-anywhere.*.service

Network endpoints1

api.telegram.org

codex-anywhere@0.5.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code