github.com / Autovara
Autovara/ AgentDeck
Rust·177 files·commit 86f6dcd·scanned 1h ago·cached ✓
40/100
SUSPICIOUS
Obfuscation or dynamic code paths detected. Intent unclear — review before running anything.
verdict accurate?
No stars or forks
No community activity
Desktop app detected
threat-state: suspiciouslive
FINDINGS ░▒▓
criticalRust process Command usagestd::process::Command can execute arbitrary shell commands. Malware uses it to drop payloads, exfiltrate data, or establish persistence.src-tauri/src/stop.rs
fn platform_kill(pid: u32) -> Result<String, String> {
let status = std::process::Command::new("kill")
.arg("-TERM")
.arg(pid.to_string())+8warningRust unsafe blockunsafe blocks bypass Rust's memory safety guarantees. Malware uses them for raw pointer manipulation, shellcode injection, or calling dangerous foreign functions.crates/agentdeck-storage/tests/path.rs
// the previous value before returning.
unsafe {
std::env::set_var("AGENTDECK_DATA_DIR", &marker);
}+3Scores are heuristics. A “safe” verdict means no known-malicious patterns were found — clever malware can look boring. Wrong verdict? Flag it above; confirmed false positives become regression tests.
131 files scanned @ 86f6dcd | 9/25/2026 | heuristic scan — always review manually
risk by category
code execution13
network & exfiltration0
file system access0
obfuscation0
supply chain0
owasp / injection0
telemetry
files 131/177rules hit 3engine v6commit 86f6dcd
github
Autovara/AgentDeck
AgentDeck is a local dashboard for tracking the AI coding agents running on your machine, with an optional Telegram bot for checking status or stopping a session from your phone.
0
0
126d
177 files
131 scanned(74%)
86f6dcd
architecture░▒▓
entry (0) flagged (2) pkg (75)
200 nodes · 399 edgesscroll to zoom · click node to jump to finding