if I'm reading that right: this thing has bash access AND inbound LLM input from untrusted sources, all in an unsupervised cron-fired task? That's not great.
Essentially :( I recently built a tool for managing many agents simultaneously and decided to focus 100% on CLI-first cause I saw that coming.
It's a massive bait & switch, honestly. I can't imagine how many hours/tokens were spent collectively building SDK-based tools on the premise of subscription pricing.