Safety Issue: Unsolicited execution of network/download command (github-release) without user confirmation

What version of Codex is running?

0.55

What subscription do you have?

PRO

Which model were you using?

_No response_

What platform is your computer?

_No response_

What issue are you seeing?

During a standard chat session, the Codex CLI autonomously executed a shell command without any prompt from me to do so.

It attempted to run: github-release download --user seabornxyz --repo bradbury --tag v1.2.0 --name bradbury.tar.gz

I did not request this file, nor was it relevant to the immediate previous prompts. The CLI did not ask for confirmation before attempting this network request and file write operation.

What steps can reproduce the bug?

Uploaded thread: 019a5613-5967-79d0-

What is the expected behavior?

The Codex CLI should never execute shell commands—especially those involving network requests or file system writes—without explicit user request and confirmation. It should propose the command and wait for approval.

Additional information

_No response_