Unverified50% confidenceFactExact time
The executor of dsh-superagent runs as an operating system user, with very weak isolation; once it runs a malicious or erroneous command, the scope of impact is the entire user environment.
1
Sources
50%
Confidence
Long-term
Relevance
11/4/2026
First Seen
Sources
DeepSeek's Open-Source Agent Teardown: 11,700 Stars but Only One Commit
bilibili翻车老头11/3/2026
Related Entities
Related Claims
UnverifiedSSM Run Command returns InvalidInstanceId when the agent is not registered, and command output is subject to size and timeout limits.59% similarUnverifiedAn agent with a shell tool runs on top of the process that hosts it, and the user's operating system permissions do not come along with it.59% similarUnverifiedSauceDemo has multiple built-in test accounts: standard_user represents a normal user, locked_out_user is rejected at login, and problem_user triggers various UI anomalies.55% similarUnverifiedThe method to manually clear the macOS quarantine attribute is to execute the command xattr -cr /Applications/AppName.app in the terminal; DSH-Work's repair script essentially automates this command.54% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1133487API
curl https://kongchang.com/api/v1/knowledge/claims/1133487MCP
get_claim(id=1133487)