1import{a as fl,b as us,g as hl}from"./chunk-KEPK7ZZ2.js";import{a as rl,c as al}from"./chunk-H4RCKWJA.js";import{a as Qe,b as tl,f as nl,g as sl,h as il,i as jt,j as cl,k as ll,l a...
L2: Computer-use helper \u2192 ${Pe(r,ss)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{eo("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
CriticalSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution with blocking evidence.
dist/chunk-N45WKCAR.jsView on unpkg · L1 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/chunk-N45WKCAR.js:
import{a as fl,b as us,g as hl}from"./chunk-KEPK7ZZ2.js";import{a as rl,c as al}from"./chunk-H4RCKWJA.js";import{a as Qe,b as tl,f as nl,g as sl,h as il,i as jt,j as cl,k as ll,l a...
The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{bl(g,{recursive:!0,force:!0})}});Ct.c...
`),{path:o,changed:r,events:i,guardInstalled:!1}}function kn(e=$n()){if(!$s(e))return!1;try{return!!JSON.parse(ks(e,"utf-8"))?.hooks?.Stop?.some?.(t=>bs(t,Pi))}catch{return!1}}var ...
`:"")+i.subarray(0,r).toString("utf8")}finally{await o.close()}awai
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/chunk-N45WKCAR.jsView on unpkg 1import{a as fl,b as us,g as hl}from"./chunk-KEPK7ZZ2.js";import{a as rl,c as al}from"./chunk-H4RCKWJA.js";import{a as Qe,b as tl,f as nl,g as sl,h as il,i as jt,j as cl,k as ll,l a...
L2: Computer-use helper \u2192 ${Pe(r,ss)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{eo("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{bl(g,{recursive:!0,force:!0})}});Ct.c...
L9: `)),{path:t,changed:l,events:a,gua
HighSandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/chunk-N45WKCAR.jsView on unpkg · L1 •Runtime or CLI code links a write operation to an explicit external AI-agent control path:
r next login").action(async()=>{hs(),await ri(ys().keep),console.log("desktop assistant stopped.")});ct.command("status").description("show the desktop login service status").action(()=>{hs();let{keep:e}=ys();try{console.log(eo("launchctl",["print",bn(e)],{encoding:"utf8",stdio:["ignore","pipe","pipe"]}))}catch{console.log(_i(e.file)?"installed, but not running. run agentx desktop start.":"not installed. run agentx desktop install.")}});import{command as np}from"commander";import{open as sp}from"fs/promises";import{existssync as $s,mkdirsync as qm,readfilesync as ks,writefilesync as xl}from"fs";import{homedir as zm}from"os";import{dirname as ep,resolve as di}from"path";var pi="/attach/",sl="/guard/ch
HighExternal Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
dist/chunk-N45WKCAR.jsView on unpkg 1Cross-file remote execution chain: dist/chunk-N45WKCAR.js spawns dist/board-dashboard-WFC3GT3R.js; helper contains network access plus dynamic code execution.
L1: import{a as fl,b as us,g as hl}from"./chunk-KEPK7ZZ2.js";import{a as rl,c as al}from"./chunk-H4RCKWJA.js";import{a as Qe,b as tl,f as nl,g as sl,h as il,i as jt,j as cl,k as ll,l a...
L2: Computer-use helper \u2192 ${Pe(r,ss)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{eo("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also
HighCross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-N45WKCAR.jsView on unpkg · L1 1Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/chunk-N45WKCAR.js
L1: import{a as fl,b as us,g as hl}from"./chunk-KEPK7ZZ2.js";import{a as rl,c as al}from"./chunk-H4RCKWJA.js";import{a as Qe,b as tl,f as nl,g as sl,h as il,i as jt,j as cl,k as ll,l a...
L2: Computer-use helper \u2192 ${Pe(r,ss)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{eo("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service
HighTrigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
dist/chunk-N45WKCAR.jsView on unpkg · L1 1import{a as fl,b as us,g as hl}from"./chunk-KEPK7ZZ2.js";import{a as rl,c as al}from"./chunk-H4RCKWJA.js";import{a as Qe,b as tl,f as nl,g as sl,h as il,i as jt,j as cl,k as ll,l a...
L2: Computer-use helper \u2192 ${Pe(r,ss)}
...
L5: Starts at login \u2192 ${a.file}${c.map(d=>`
L6: Removes duplicate login item \u2192 ${d.file}`).join("")}`),e.dryRun)return;try{eo("xcrun",["--find","swiftc"],{stdio:"pipe"})}catch{throw new Error("Apple command-line tools are r...
L7: Allow Microphone for the app and Accessibility / Screen Recording for the helper when macOS asks.
L8: The AgentX daemon and a speech transcription backend must also be available. Run agentx desktop status to inspect the login service.`)}finally{bl(g,{recursive:!0,force:!0})}});Ct.c...
L9: `)),{path:t,changed:l,events:a,gua
MediumInstall Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/chunk-N45WKCAR.jsView on unpkg · L1