Comment by Iolaum

8 hours ago

Nothing is stopping anyone from pointing their agent to that script to review and audit it before running it.

1 comment

Iolaum

Reply
layer8  8 hours ago

I don’t believe an agent can do that effectively without a sandbox to run the script in, if the script isn’t self-contained.

And everyone running a research agent on every download can’t be the solution. It’s much more effective to crowdsource a security database based on hashes. But for that, the downloads need to be self-contained.