---
title: "這太他媽危險了 REA 讓你的代理讀取你電腦上的任何閉源應用程式"
url: "https://reamcp.dev/zh-tw/cases/this-is-f-cking-dangerous-rea-lets-your-agent-read-any-close-7fce59"
source: "https://x.com/i/status/2111427421958185262"
source_type: "x"
author: "NO1ennn"
author_handle: "N01ennn"
stars: 0
category: "應用功能重現"
categories: ["app-recreation"]
tags: ["closed-source-analysis", "electron", "ghidra", "jadx", "mcp", "reverse-engineering"]
added: "2026-10-19T02:07:31.545Z"
updated: "2026-10-17T12:01:40.000Z"
locale: "zh-tw"
content_locale: "zh-tw"
---

# 這太他媽危險了 REA 讓你的代理讀取你電腦上的任何閉源應用程式

這太他媽危險了

REA 讓你的代理讀取你筆記型電腦上的任何閉源應用程式，直到二進位檔案

當你向它提一個問題時會發生什麼：

> 你問：當我點擊匯出時會發生什麼？
> 你的代理呼叫 REA，一個在你的機器上運行的 MCP 伺服器
> REA 選擇引擎：Ghidra、IDA、JADX、瀏覽器，或者什麼都不用
> 它追蹤點擊：renderer -> preload -> IPC -> main
> 發現結果帶回了程式碼、證據和未知項
> 你的代理解釋該功能如何運作
> 然後建立你自己的版本並測試它

MIT 授權。本地運行。GitHub 當日排名第一的儲存庫。

npx rea-agents setup

## Original README

this is f*cking dangerous

REA lets your agent read any closed-source app on your laptop, down to the binary

here's what happens when you ask it one question:

> you ask: what happens when I click Export?
> your agent calls REA, one MCP server, running on your machine
> REA picks the engine: Ghidra, IDA, JADX, a browser, or none at all
> it traces the click: renderer -> preload -> IPC -> main
> findings come back with the code, the evidence and the unknowns
> your agent explains how the feature works
> then builds your own version and tests it

MIT. runs locally. #1 repo of the day on GitHub.

npx rea-agents setup