No confirmed malicious attack surface. Explicit CLI automation sends WhatsApp content to a user-configured LLM provider and replies through the authenticated WhatsApp session.
Static reason
No blocking static signals were detected.
Trigger
User runs replypilot start after configuration and WhatsApp authentication.
Impact
Configured message context, and optionally media/audio, is sent to the selected provider as part of the advertised feature.
Mechanism
User-configured WhatsApp reply automation via OpenAI-compatible LLM API.
Rationale
Source inspection shows a user-invoked WhatsApp automation CLI with configured LLM/network behavior matching its stated purpose. No install-time execution, secret harvesting, covert exfiltration, remote payload execution, or stealth persistence was found.
Evidence
package.jsondist/cli.jsdist/index.js
Network endpoints4
localhost:1234/v1localhost:11434/v1ollama.com/v1localhost:8080/inference