Desktop安装的安全坑
Desktop Install Security Pitfalls
要点
- 社区Desktop会替你装依赖并打开十四套工具和十六个网关
- Windows包未签名会触发SmartScreen，WSL安装还曾要求无密码sudo
- 密钥别只放明文.env，可改用1Password、Bitwarden或GnuPG取密
- 这是带壳执行权限的代理，安装前先看它实际能碰哪些系统
原帖开头
Most agent adoption dies at the install step. Not at capability. At the terminal. Hermes Agent from Nous Research is one of the most starred agent projects on GitHub at 239k stars. It has a learning loop, 40+ tools, seven terminal backends, and gateways for Telegram, Discord, …
