da-cli-deviantart-sync
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the 'da-sync' tool from PyPI and clones source code from an external repository at 'https://github.com/FZ2000/da-cli.git'. These resources are not provided by a recognized trusted organization.
- [PERSISTENCE]: Establishes long-term persistence by creating and enabling scheduled background services using 'launchd' plist files on macOS and 'systemd' timer/service units on Linux. These are configured to run the sync tool automatically on a daily basis.
- [COMMAND_EXECUTION]: Instructs the user to run shell scripts such as 'install.sh' and 'install_schedule.sh' and provides Python code that uses 'subprocess.run' to execute system commands like 'osascript' for desktop notifications.
Audit Metadata