Account was flagged for potentially high-risk cyber activity.

Resolved 💬 3 comments Opened Apr 27, 2026 by Nyannnnning Closed Apr 27, 2026
💡 Likely answer: A maintainer (github-actions[bot], contributor) responded on this thread — see the highlighted reply below.

What version of Codex CLI is running?

codex-cli 0.124.0

What subscription do you have?

chatgpt pro

Which model were you using?

gpt-5.5

What platform is your computer?

Microsoft Windows NT 10.0.26200.0 x64

What terminal emulator and version are you using (if applicable)?

WSL2

What issue are you seeing?

Account was flagged for potentially high-risk cyber activity.

What steps can reproduce the bug?

Uploaded thread: 019dbd33-9e6f-79a0-ac1d-173d3ce972a1

What is the expected behavior?

I never wanted to breach anything just wanted to build a crawler that does screenshots.

Additional information

_No response_

View original on GitHub ↗

3 Comments

github-actions[bot] contributor · 4 months ago

Potential duplicates detected. Please review them and close your issue if it is a duplicate.

  • #19403
  • #19204
  • #19738
  • #19324
  • #19379

Powered by Codex Action

etraut-openai contributor · 4 months ago

Thanks for reporting. This will help us tune our classifier.

Nyannnnning · 4 months ago

Hi,

I think the flag was likely triggered by a small internal tool I built. It’s basically a script that visits a list of websites and takes screenshots — not just for UI/UX, but mainly to check product listing status and where promotional banners are placed.

There’s no scraping of structured data, no attempt to bypass anything, and no access to restricted areas. It’s just capturing what’s publicly visible on the page.

That said, I do understand why this might look suspicious from the outside — automated browsing across multiple domains combined with screenshot capture probably overlaps with patterns that resemble crawling or reconnaissance.

I’ve already paused the tool and I’m reworking it to be more constrained (smaller scope, more explicit triggers, less automation).

If there are specific guidelines or limits I should follow for this kind of use case, I’d really appreciate the direction so I can adjust properly.