RE: https://infosec.exchange/@BleepingComputer/117502338274959242

„customer’s ~/Downloads folder, which also served as the agent’s working directory.”
friends don’t let friends run agents on random folders
(ideally not unsandboxed)