Unverified50% confidenceCautionExact time
The script will indiscriminately execute any command the model requests with the runner's permissions, posing security risks, and it is recommended not to run it in the working directory.
1
Sources
50%
Confidence
Long-term
Relevance
10/19/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn its default state, Pi executes scripts directly when asked to write and run them, without seeking user consent at all, which constitutes a security risk.67% similarUnverified使用--ignore-scripts参数可禁止安装过程中自动执行lifecycle脚本，但会破坏部分依赖原生编译的包的正常安装64% similarUnverifiedConfiguring disable model invocation: true prevents the model from actively invoking the Skill; it can only be triggered manually by the user via a slash command, and the content will not be sent to the model.63% similarUnverified将Codex权限设置为"完全允许"会使Agent在整个文件系统范围内的读写与命令执行绕过人工审核，若封装包含恶意指令集损害将在用户无察觉下完成63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1070888API
curl https://kongchang.com/api/v1/knowledge/claims/1070888MCP
get_claim(id=1070888)