Comment by jdkoeck
It is completely vibe coded. The author himself says he doesn't check the code.
https://x.com/Hesamation/status/2016712942545240203
Can't believe people are giving it full access to their MacOS user session. It's a giant vulnerability waiting to happen.
Sending an email with prompt injection is all it takes.
this should be top comment, this whole project is a 0 day orgy