Automated research artifact — not the upstream project.

This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of RooCodeInc/Roo-Code at commit 08a825f9bb0086a88cff5a79b9af4731bba7d076 (2025-09-04), redistributed under that project's own licence, whose file is included unchanged in this snapshot.

The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2025-09-04; see pinning.md in the harness output for every change made to the snapshot.

Questions or objections: [email protected]

---

Roo Code is an AI-powered autonomous coding agent that lives in your editor. It can:

• Communicate in natural language
• Read and write files directly in your workspace
• Run terminal commands
• Automate browser actions
• Integrate with any OpenAI-compatible or custom API/model
• Adapt its “personality” and capabilities through Custom Modes

Whether you’re seeking a flexible coding partner, a system architect, or specialized roles like a QA engineer or product manager, Roo Code can help you build software more efficiently.

Check out the CHANGELOG for detailed updates and fixes.

---

🎉 Roo Code 3.25 Released

Roo Code 3.25 brings powerful new features and significant improvements to enhance your development workflow!

• Message Queueing - Queue multiple messages while Roo is working, allowing you to continue planning your workflow without interruption.
• Custom Slash Commands - Create personalized slash commands for quick access to frequently used prompts and workflows, with full UI management.
• Enhanced Gemini Tools - New URL context and Google Search grounding capabilities provide Gemini models with real-time web information and enhanced research abilities.

---

What Can Roo Code Do?

• 🚀 Generate Code from natural language descriptions
• 🔧 Refactor & Debug existing code
• 📝 Write & Update documentation
• 🤔 Answer Questions about your codebase
• 🔄 Automate repetitive tasks
• 🏗️ Create new files and projects

Quick Start

1. Install Roo Code
2. Connect Your AI Provider
3. Try Your First Task

Key Features

Multiple Modes

Roo Code adapts to your needs with specialized modes:

• Code Mode: For general-purpose coding tasks
• Architect Mode: For planning and technical leadership
• Ask Mode: For answering questions and providing information
• Debug Mode: For systematic problem diagnosis
• Custom Modes: Create unlimited specialized personas for security auditing, performance optimization, documentation, or any other task

Smart Tools

Roo Code comes with powerful tools that can:

• Read and write files in your project
• Execute commands in your VS Code terminal
• Control a web browser
• Use external tools via MCP (Model Context Protocol)

MCP extends Roo Code's capabilities by allowing you to add unlimited custom tools. Integrate with external APIs, connect to databases, or create specialized development tools - MCP provides the framework to expand Roo Code's functionality to meet your specific needs.

Customization

Make Roo Code work your way with:

• Custom Instructions for personalized behavior
• Custom Modes for specialized tasks
• Local Models for offline use
• Auto-Approval Settings for faster workflows

Resources

Documentation