1import{a as rg,b as Qs,g as ig}from"./chunk-EI7D5V2L.js";import{A as Pi,B as ng,D as sg,a as it,b as Md,f as Ct,g as Ud,h as qd,i as Gd,j as Hd,l as zd,m as Yd,n as Vd,o as _i,p as...
L2: Computer-use helper \u2192 ${Fe(i,Ds)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{ut("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/program-OKPC77BN.jsView on unpkg · L1 1import{a as rg,b as Qs,g as ig}from"./chunk-EI7D5V2L.js";import{A as Pi,B as ng,D as sg,a as it,b as Md,f as Ct,g as Ud,h as qd,i as Gd,j as Hd,l as zd,m as Yd,n as Vd,o as _i,p as...
L2: Computer-use helper \u2192 ${Fe(i,Ds)}
...
L9: `)),{path:o,changed:l,events:a,guardInstalled:c}}function yg(e={}){let t=e.path??Yn();if(!sr(t))return{path:t,changed:!1,events:[],guardInstalled:!1};let o;try{o=JSON.parse(rr(t,"u...
L10: `),{path:t,changed:i,events:r,guardInstalled:!1}}function Vn(e=Yn()){if(!sr(e))return!1;try{return!!JSON.parse(rr(e,"utf-8"))?.hooks?.Stop?.some?.(o=>nr(o,qi))}catch{return!1}}var ...
L11: `:"")+r.subarray(0,i).toString("utf8")}finally{await t.close()}await $g(e.url,"ended",bl.parse({sessionId:e.session,runId:e.run,transcript:o})),console.log("Run queued for review."...
CriticalCommand Output Exfiltration
Source executes local commands and sends command output to an external endpoint.
dist/program-OKPC77BN.jsView on unpkg · L1 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/program-OKPC77BN.js:
import{a as rg,b as Qs,g as ig}from"./chunk-EI7D5V2L.js";import{A as Pi,B as ng,D as sg,a as it,b as Md,f as Ct,g as Ud,h as qd,i as Gd,j as Hd,l as zd,m as Yd,n as Vd,o as _i,p as...
The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{lg(g,{recursive:!0,force:!0})}});Zo.c...
`),{path:t,changed:i,events:r,guardInstalled:!1}}function Vn(e=Yn()){if(!sr(e))return!1;try{return!!JSON.parse(rr(e,"utf-8"))?.hooks?.Stop?.some?.(o=>nr(o,qi))}catch{return!1}}var ...
`:"")+r.subarray(0,i).toString("utf8")}finally{await t.close()}aw
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/program-OKPC77BN.jsView on unpkg •Runtime or CLI code links a write operation to an explicit external AI-agent control path:
r next login").action(async()=>{er(),await li(tr().keep),console.log("desktop assistant stopped.")});zo.command("status").description("show the desktop login service status").action(()=>{er();let{keep:e}=tr();try{console.log(ut("launchctl",["print",zn(e)],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}))}catch{console.log(fi(e.file)?"installed, but not running. run agentx desktop start.":"not installed. run agentx desktop install.")}});import{command as nf}from"commander";import{open as _f}from"fs/promises";import{existssync as sr,mkdirsync as cf,readfilesync as rr,writefilesync as ug}from"fs";import{homedir as if}from"os";import{dirname as of,resolve as ui}from"path";var qi="/attach/",pg="/guard/ch
HighExternal Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/program-OKPC77BN.jsView on unpkg 1Cross-file remote execution chain: dist/program-OKPC77BN.js spawns dist/board-dashboard-FNMZAP7A.js; helper contains network access plus dynamic code execution.
L1: import{a as rg,b as Qs,g as ig}from"./chunk-EI7D5V2L.js";import{A as Pi,B as ng,D as sg,a as it,b as Md,f as Ct,g as Ud,h as qd,i as Gd,j as Hd,l as zd,m as Yd,n as Vd,o as _i,p as...
L2: Computer-use helper \u2192 ${Fe(i,Ds)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{ut("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must als
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/program-OKPC77BN.jsView on unpkg · L1 1Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/program-OKPC77BN.js
L1: import{a as rg,b as Qs,g as ig}from"./chunk-EI7D5V2L.js";import{A as Pi,B as ng,D as sg,a as it,b as Md,f as Ct,g as Ud,h as qd,i as Gd,j as Hd,l as zd,m as Yd,n as Vd,o as _i,p as...
L2: Computer-use helper \u2192 ${Fe(i,Ds)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{ut("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login servi
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/program-OKPC77BN.jsView on unpkg · L1 10`),{path:t,changed:i,events:r,guardInstalled:!1}}function Vn(e=Yn()){if(!sr(e))return!1;try{return!!JSON.parse(rr(e,"utf-8"))?.hooks?.Stop?.some?.(o=>nr(o,qi))}catch{return!1}}var ...
L11: `:"")+r.subarray(0,i).toString("utf8")}finally{await t.close()}await $g(e.url,"ended",bl.parse({sessionId:e.session,runId:e.run,transcript:o})),console.log("Run queued for review."...
L12: `)){let n=o.trim();if(!n||n.startsWith("#"))continue;let s=n.indexOf("=");if(s<0)continue;let r=n.slice(0,s).trim();if(!r||process.env[r]!==void 0)continue;let i=n.slice(s+1).trim(...
MediumDynamic Require
Package source references dynamic require/import behavior.
dist/program-OKPC77BN.jsView on unpkg · L10 1import{a as rg,b as Qs,g as ig}from"./chunk-EI7D5V2L.js";import{A as Pi,B as ng,D as sg,a as it,b as Md,f as Ct,g as Ud,h as qd,i as Gd,j as Hd,l as zd,m as Yd,n as Vd,o as _i,p as...
L2: Computer-use helper \u2192 ${Fe(i,Ds)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{ut("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{lg(g,{recursive:!0,force:!0})}});Zo.c...
L9: `)),{path:o,changed:l,events:a,gua
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/program-OKPC77BN.jsView on unpkg · L1