---
title: "这太他妈危险了 REA 让你的代理读取你电脑上的任何闭源应用"
url: "https://reamcp.dev/zh-cn/cases/this-is-f-cking-dangerous-rea-lets-your-agent-read-any-close-7fce59"
source: "https://x.com/i/status/2111427421958185262"
source_type: "x"
author: "NO1ennn"
author_handle: "N01ennn"
stars: 0
category: "应用功能复现"
categories: ["app-recreation"]
tags: ["closed-source-analysis", "electron", "ghidra", "jadx", "mcp", "reverse-engineering"]
added: "2026-10-19T02:07:31.545Z"
updated: "2026-10-17T12:01:40.000Z"
locale: "zh-cn"
content_locale: "zh-cn"
---

# 这太他妈危险了 REA 让你的代理读取你电脑上的任何闭源应用

这太他妈危险了

REA 让你的代理读取你笔记本电脑上的任何闭源应用，直到二进制文件

当你向它提一个问题时会发生什么：

> 你问：当我点击导出时会发生什么？
> 你的代理调用 REA，一个在你的机器上运行的 MCP 服务器
> REA 选择引擎：Ghidra、IDA、JADX、浏览器，或者什么都不用
> 它跟踪点击：renderer -> preload -> IPC -> main
> 发现结果带回了代码、证据和未知项
> 你的代理解释该功能如何工作
> 然后构建你自己的版本并测试它

MIT 许可。本地运行。GitHub 当日排名第一的仓库。

npx rea-agents setup

## Original README

this is f*cking dangerous

REA lets your agent read any closed-source app on your laptop, down to the binary

here's what happens when you ask it one question:

> you ask: what happens when I click Export?
> your agent calls REA, one MCP server, running on your machine
> REA picks the engine: Ghidra, IDA, JADX, a browser, or none at all
> it traces the click: renderer -> preload -> IPC -> main
> findings come back with the code, the evidence and the unknowns
> your agent explains how the feature works
> then builds your own version and tests it

MIT. runs locally. #1 repo of the day on GitHub.

npx rea-agents setup