open-interpreter

This wrapper launches OpenInterpreter to carry out a supplied task, including autonomous OS actions with automatic approval enabled; this presents a significant capability-related security risk if the task or invocation is untrusted. Local mode also makes an HTTP request to the user-configurable api_base URL (default http://localhost:11434), which can target unintended services if that option is controlled by an attacker. The code itself shows no clear malicious behavior, credential theft, or obfuscation; ANTHROPIC_API_KEY is only checked for presence here. Severity: moderate to high depending on who controls the task and invocation.