No confirmed malicious attack surface. Runtime WhatsApp automation intentionally submits message context to a configured OpenAI-compatible provider and sends the generated reply.
Static reason
No blocking static signals were detected.
Trigger
User runs replypilot start after interactive configuration and WhatsApp QR login.
Impact
Configured provider receives conversation context needed to generate replies; this is disclosed package functionality.
Mechanism
User-configured WhatsApp-to-LLM reply automation
Rationale
Direct inspection confirms a user-invoked WhatsApp auto-reply CLI with configured LLM networking, not a concealed attack chain. No install-time execution or unauthorized data/control-surface mutation was found.
Evidence
package.jsondist/index.jsdist/cli.jsREADME.md.wwebjs_cachewhatsapp-sessions
Network endpoints4
localhost:1234/v1localhost:11434/v1ollama.com/v1localhost:8080/inference