Security checks across malware telemetry and agentic risk
This skill openly gives a cloud agent broad remote control over the user's computer and network, but it lacks strong built-in limits for such high-impact access.
Install only if you intentionally want a fully trusted agent to control your computer and network. Use an isolated VM or dedicated low-privilege account, bind to localhost unless public access is absolutely required, avoid workplace or internal networks unless explicitly authorized, use strong short-lived tokens, and review logs and commands closely.
token = os.environ.get("TUNNEL_AGENT_TOKEN")
# 1. θ·εδΈ΄ζΆη«―ε£
resp = requests.post(f"http://{host}:{http_port}/api/session", json={"token": token})
port = resp.json()["port"]
# 2. η«ε³θΏζ₯token = os.environ.get("TUNNEL_AGENT_TOKEN")
# 1. θ·εδΈ΄ζΆη«―ε£
resp = requests.post(f"http://{host}:{http_port}/api/session", json={"token": token})
port = resp.json()["port"]
# 2. η«ε³θΏζ₯host = os.environ.get("TUNNEL_HOST", "127.0.0.1")
http_port = os.environ.get("TUNNEL_HTTP_PORT", "8080")
token = os.environ.get("TUNNEL_AGENT_TOKEN")
# 1. θ·εδΈ΄ζΆη«―ε£
resp = requests.post(f"http://{host}:{http_port}/api/session", json={"token": token})π Direct tunnel from Cloud Agent β Local terminal Grants AI Agents running in restricted cloud environments full control over your local computer. β Bypass network restrictions, escape API sandboxes, execute arbitrary commands, and enable bidirectional file transfer. env: - TUNNEL_HOST
The Agent will be able to: - π **Read, modify, or delete any file** on your hard drive (including private data, secrets, system files) - π» **Execute any system command** (e.g., `rm -rf /`, `curl ... | sh`, install backdoors) - π **Access any external service** through your network (including internal networks, public Internet, dark web) - π **Launch any software** installed on your computer (browser, editor, database client, etc.)
The Agent will be able to: - π **Read, modify, or delete any file** on your hard drive (including private data, secrets, system files) - π» **Execute any system command** (e.g., `rm -rf /`, `curl ... | sh`, install backdoors) - π **Access any external service** through your network (including internal networks, public Internet, dark web) - π **Launch any software** installed on your computer (browser, editor, database client, etc.)
The Agent will be able to: - π **Read, modify, or delete any file** on your hard drive (including private data, secrets, system files) - π» **Execute any system command** (e.g., `rm -rf /`, `curl ... | sh`, install backdoors) - π **Access any external service** through your network (including internal networks, public Internet, dark web) - π **Launch any software** installed on your computer (browser, editor, database client, etc.)
66/66 vendors flagged this skill as clean.