RepoGym runs agent CLIs and repository verification commands as your current operating-system user. A copied workspace is not a security sandbox.

A malicious or compromised process may:

• read files outside the workspace;
• read inherited environment variables;
• access the network;
• start other processes;
• modify files your user can modify;
• persist through tool-specific configuration or caches.

Use a disposable VM, container, restricted user account, or operating-system sandbox when evaluating untrusted repositories or agents. Remove secrets from the environment and disable network access externally when appropriate.

Only the latest release receives security fixes during the alpha phase.

Do not open a public issue for a vulnerability that could expose user data or execute unintended commands. Use GitHub's private security advisory flow after publishing the repository, or contact the maintainer through the private address configured on the repository.

Include a minimal reproduction, affected version, platform, and impact. Do not include real API keys or private repository content.