{"id":"openinterpreter.com/open-interpreter","name":"Open Interpreter","commands":["interpreter","i"],"examples":[{"run":"interpreter","does":"Start an interactive coding session (or just type i)"},{"run":"interpreter exec \"<task>\"","does":"Run one task non-interactively"},{"run":"interpreter acp","does":"Run as an Agent Client Protocol agent for editors"}],"description":"Coding agent built for low-cost and open models, now a Rust fork of OpenAI Codex.","homepage":"https://www.openinterpreter.com","repository":"https://github.com/openinterpreter/openinterpreter","license":"Apache-2.0","agentic":true,"latest_version":"0.0.56","vendor":"Open Interpreter","install":"curl -fsSL https://www.openinterpreter.com/install | sh","publisher":"third-party","w3bs":"w3bs install openinterpreter.com/open-interpreter","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":6940,"summary":{"critical":1,"high":16,"medium":3,"low":167,"info":0},"malware":0,"truncated":true,"version":"0.0.56","sources":{"installer":"https://www.openinterpreter.com/install","installerSha256":"d62b0b43dd15ec7676a6bfce4057aca8a86f038a93139c362b64fbe30f6b9f36","repository":"github.com/openinterpreter/openinterpreter","commit":"79c297a088b1d8dec415747f330f21023b7da8fc"},"notes":[],"scannedAt":"2026-11-02T23:00:54.767Z","findings":[{"ruleId":"secret-private-key","title":"Private Key","severity":"critical","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/auth_tests.rs","line":2826,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/.github/scripts/macos-signing/notarize_with_akv.py","line":260,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/.github/scripts/macos-signing/notarize_with_akv.py","line":373,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/.github/scripts/macos-signing/notarize_with_akv.py","line":405,"malware":false},{"ruleId":"sensitive-file-committed","title":"Sensitive file","severity":"high","category":"file","cwe":"CWE-538","file":"source/codex-rs/http-client/tests/fixtures/test-ca-trusted.pem","line":1,"malware":false},{"ruleId":"sensitive-file-committed","title":"Sensitive file","severity":"high","category":"file","cwe":"CWE-538","file":"source/codex-rs/http-client/tests/fixtures/test-ca.pem","line":1,"malware":false},{"ruleId":"sensitive-file-committed","title":"Sensitive file","severity":"high","category":"file","cwe":"CWE-538","file":"source/codex-rs/http-client/tests/fixtures/test-intermediate.pem","line":1,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"high","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/bedrock_api_key_tests.rs","line":42,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/codex-rs/scripts/write_model_compatibility_catalog.py","line":24,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/codex-rs/scripts/write_provider_catalog.py","line":30,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/codex-rs/scripts/write_provider_catalog.py","line":240,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/scripts/install/install-open-interpreter.sh","line":29,"malware":false},{"ruleId":"sh-remote-script-execution","title":"network output piped into a shell","severity":"high","category":"code","cwe":"CWE-494","file":"source/scripts/install/install-open-interpreter.sh","line":34,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/scripts/ollama_qwen_smoke.py","line":186,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/sdk/python/_runtime_setup.py","line":163,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/sdk/python/_runtime_setup.py","line":191,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/sdk/python/_runtime_setup.py","line":223,"malware":false},{"ruleId":"sh-unquoted-expansion-destructive","title":"unquoted expansion in a destructive command","severity":"medium","category":"code","cwe":"CWE-78","file":"source/scripts/test-remote-env.sh","line":88,"malware":false},{"ruleId":"sh-eval-expansion","title":"eval on an expanded string","severity":"medium","category":"code","cwe":"CWE-78","file":"source/scripts/test-remote-env.sh","line":158,"malware":false},{"ruleId":"js-dynamic-code-execution","title":"dynamic code execution","severity":"medium","category":"code","cwe":"CWE-95","file":"source/scripts/test-streaming-web-chat.mjs","line":135,"malware":false},{"ruleId":"secret-private-key","title":"Private Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/agent-identity/src/lib.rs","line":832,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server-client/src/lib.rs","line":1556,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server-protocol/src/protocol/common.rs","line":3541,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server-protocol/src/protocol/item_builders_tests.rs","line":13,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server-protocol/src/protocol/item_builders_tests.rs","line":13,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server-transport/src/transport/remote_control/tests.rs","line":121,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server-transport/src/transport/remote_control/websocket.rs","line":2043,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/src/models_refresh_worker_tests.rs","line":202,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/tests/suite/v2/account.rs","line":1081,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/tests/suite/v2/account.rs","line":1243,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/tests/suite/v2/account.rs","line":1473,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs","line":306,"malware":false},{"ruleId":"secret-hex-token","title":"High-entropy Hex Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs","line":306,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/app-server/tests/suite/v2/connection_handling_websocket.rs","line":334,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/cli/src/doctor/desktop/windows_security_tests.rs","line":67,"malware":false},{"ruleId":"secret-aws-access-key","title":"AWS Access Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/cli/src/doctor/output.rs","line":1826,"malware":false},{"ruleId":"secret-aws-access-key","title":"AWS Access Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/cli/src/doctor/output.rs","line":1827,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/cloud-config/src/service_tests.rs","line":879,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/cloud-config/src/service_tests.rs","line":936,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/codex-mcp/src/connection_manager_tests.rs","line":6303,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/config/src/loader/tests.rs","line":217,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/config/src/loader/tests.rs","line":1007,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/config/src/loader/tests.rs","line":1015,"malware":false},{"ruleId":"secret-github-token","title":"GitHub Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_sandbox_tests.rs","line":75,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":656,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":658,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":660,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":662,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":663,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":666,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":669,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":866,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1202,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1255,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1321,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1323,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1325,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1431,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/shell_snapshot_tests.rs","line":1449,"malware":false},{"ruleId":"secret-github-token","title":"GitHub Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/tools/runtimes/mod_tests.rs","line":818,"malware":false},{"ruleId":"secret-github-token","title":"GitHub Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/tools/runtimes/mod_tests.rs","line":822,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/tools/runtimes/mod_tests.rs","line":867,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/tools/runtimes/mod_tests.rs","line":877,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/tools/runtimes/mod_tests.rs","line":881,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/core/src/tools/runtimes/mod_tests.rs","line":1304,"malware":false},{"ruleId":"secret-jwt","title":"JSON Web Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/exec/tests/suite/apply_patch.rs","line":200,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/feedback/src/lib.rs","line":1041,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/http-client/src/route_aware_client_pool_tests.rs","line":241,"malware":false},{"ruleId":"secret-private-key","title":"Private Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/agent_identity.rs","line":573,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/auth_tests.rs","line":1065,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/auth_tests.rs","line":1066,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/auth_tests.rs","line":1210,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/auth_tests.rs","line":1211,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/personal_access_token_tests.rs","line":41,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/auth/personal_access_token_tests.rs","line":72,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/gateway_auth_tests.rs","line":402,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/gateway_auth_tests.rs","line":447,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/gateway_auth_tests.rs","line":858,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/gateway_auth_tests.rs","line":1053,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/kimi_code.rs","line":580,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/kimi_code.rs","line":600,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/login/src/kimi_code.rs","line":601,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/memories/write/src/phase1.rs","line":669,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/memories/write/src/phase1.rs","line":679,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/memories/write/src/startup_tests.rs","line":901,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/amazon_bedrock/auth.rs","line":383,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/amazon_bedrock/auth.rs","line":486,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/amazon_bedrock/mod.rs","line":490,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/amazon_bedrock/mod.rs","line":658,"malware":false},{"ruleId":"secret-jwt","title":"JSON Web Token","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/auth.rs","line":452,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/auth.rs","line":607,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/auth.rs","line":624,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/auth.rs","line":709,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/model-provider/src/provider.rs","line":782,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/network-proxy/src/credential_broker_tests.rs","line":52,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/network-proxy/src/credential_broker_tests.rs","line":53,"malware":false},{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/network-proxy/src/credential_broker_tests.rs","line":53,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/network-proxy/src/credential_broker_tests.rs","line":89,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/network-proxy/src/credential_broker_tests.rs","line":90,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/codex-rs/network-proxy/src/credential_broker_tests.rs","line":98,"malware":false}]}}