Is ai-sdk-provider-codex-cli safe?

The component can run operating-system commands or spawn processes.

import { spawn } from 'child_process';

const child = spawn(cmd, args, { env, cwd, stdio: ["pipe", "pipe", "pipe"] });

this.child = spawn(base.cmd, args, {

Why it matters: Powerful and often legitimate — confirm the commands aren't built from untrusted input.

Fix: Confirm the command and its arguments are fully controlled and not derived from untrusted input; prefer execFile with an argument array.

package.json has a 'prepare' script (runs on git/local installs and before publishing).

"prepare": "npm run build",

Why it matters: Usually a build step, but confirm it doesn't fetch or run remote code.

Fix: Usually a legitimate build step; confirm it only builds and does not fetch or execute remote code.

The component makes outbound network requests.

import { createServer } from 'http';

Why it matters: Usually legitimate, but confirm the destinations are expected and no sensitive data leaves.

Fix: Confirm the destination hosts are expected and that no sensitive data is sent off-host.