The chatcc-agent npm package runs a daemon that connects to Tencent Cloud IM and accepts remote commands via WebSocket messages. These commands can spawn or write to a local shell or PTY on the host machine, effectively providing a remote shell access channel. Access is controlled by JWT and paired-client authentication, but the design inherently exposes a remote command execution surface. The npm install script only performs local native builds and does not fetch remote content. Version 0.8.24 is affected.