streamdeck-agent-cockpit

No clear malware or supply-chain sabotage is present. The code is readable and uses standard defensive controls such as bearer authentication, loopback-by-default binding, shell=False, command validation, request-size limits, and confirmation checks. It is nevertheless a high-impact local control daemon because configured commands can execute arbitrary programs, inherited environment variables are exposed to those commands, and explicit non-loopback binding can make this capability remotely reachable. Security depends heavily on protecting the configuration and token and avoiding nonlocal exposure.