6a5c2ba53b
Unquoted \$ARGUMENTS in the ! shell commands allowed shell metacharacters in user-supplied job IDs to be expanded before Node received them (e.g., `task-123; malicious-cmd` would execute the trailing command). This is inconsistent with review.md and adversarial-review.md, which both wrap "$ARGUMENTS" in double quotes. Co-authored-by: claude[bot] <claude-bot@anthropic.com> Co-authored-by: Claude Code <noreply@anthropic.com>
9 lines
244 B
Markdown
9 lines
244 B
Markdown
---
|
|
description: Cancel an active background Codex job in this repository
|
|
argument-hint: '[job-id]'
|
|
disable-model-invocation: true
|
|
allowed-tools: Bash(node:*)
|
|
---
|
|
|
|
!`node "${CLAUDE_PLUGIN_ROOT}/scripts/codex-companion.mjs" cancel "$ARGUMENTS"`
|