In the still-open verification request omacom/omarchy-plugin-marketplace#6429, HANCORE-linux reported that website-controlled window titles reached Crush with automatically approved shell and file tools. With that AI mode enabled, the reviewer said a visited page could inject instructions that execute commands as the desktop user, despite the plugin's promise that the agent only generates remarks.
CostaFot responded that version 1.55.0 removes agents that cannot run with every tool disabled, retaining only restricted Claude and pi configurations. The response also says screenshots no longer require enabling a file-reading tool. CostaFot retargeted verification to the reported fix in omacom/omarchy-plugin-marketplace#6429:issuecomment-6301654018. The supplied record establishes a reported remediation and an updated target, not completed marketplace verification or an independent security audit.
