codex - 💡(How to fix) Fix Make external access opt-in by default in Codex CLI [1 participants]

What variant of Codex are you using?

Codex CLI 0.125.0

What feature would you like to see?

Make external access opt-in by default in Codex CLI.

Additional information

This is a security hardening / safer-defaults request, not a bug report.

Recommended defaults:

• Network access disabled unless explicitly enabled.
• No implicit git clone, git fetch, or git pull.
• No implicit package install commands such as npm install, pnpm install, yarn install, or bun install.
• GitHub/Gmail and other connectors disabled unless explicitly enabled.
• External plugin/repo cache fetches should require clear user consent.
• Safety rules should be centralized and easy to inspect, not dependent on wrapper scripts or cwd-specific behavior.

Rationale:

Supply-chain incidents such as compromised npm packages make automatic dependency fetching risky. Users need a predictable default where Codex cannot reach external repos, package registries, or connectors without explicit approval.

The current configuration can be made safe with settings such as network_access = false, connector/plugin disables, and global instructions, but these are difficult for ordinary users and teams to discover and standardize.

A safer default would reduce accidental exposure for local development environments and CI-like workflows.