The @aster110/cc2wechat npm package version 5.1.0 runs a daemon that polls Tencent's iLink Bot API for WeChat messages and forwards them to a locally hosted AI agent with all safety and sandbox restrictions disabled. This setup allows any sender of a WeChat message to execute arbitrary shell and filesystem commands on the host machine running the daemon. The remote shell capability activates only when the daemon is started via the CLI, not during installation or import.