--- title: "Local security review with recorded evidence – superbot.gg" canonical_url: "https://superbot.gg/use-cases/local-security-review" summary: "Four local security recordings with exact prompts, observed results, visible limits and public evidence notes: a service scan, connection sample, key review and authorized decompilation." --- > Markdown of https://superbot.gg/use-cases/local-security-review. Site index: /llms.txt. # Local security review Four local demos.Claims and limits in text. [Install now](https://superbot.gg/download?cta%5Fid=page%5Finstall) [See the proof](https://superbot.gg/use-cases/local-security-review#proof) ## Service versions, ranked **Claim**Nmap -sV returned service/version rows Actual prompt ``` nmap -sV scanme.nmap.org, then rank what answered by how easy it is to get into and tell me what to fix first ``` ### Observed Service/version rows and a "Fix in this order" ranking The answer cautions that an old release line is not a specific CVE claim ### Not established - Exploitability or an exploit - Patch state or a completed fix [Download the scan recording](https://superbot.gg/site/assets/local-security-review/scan.mp4?v=1) Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe, captions and end card. Transcript and capture notes Take, date and environment 16:9-2b92f34a; 2026-10-25T00:10:00Z; desktop dev; real Superbot Helper 1.1.6-dev.60, protocol 1 Tool and version Nmap with -sV; Nmap version not recorded Finding film range 00:03.689-00:19.081, including time-compressed answer assembly and the held answer Material edits Source 0.000-8.494 s trimmed; 73.362 s wait compressed to 1.200 s; 21.881 s editorial timeline Film SHA256 `0c2279f43be62b93430ba4292502e0efa844fb7b2cfcaeeb54f4ae235c3aaa93` Evidence note SHA256 `aeaf38f4b6cfc1af532744bffec53754054d9e72d4133920d136ef8e91bc27ab` [Read the public evidence note](https://superbot.gg/site/assets/local-security-review/scan.txt?v=1) Nmap and scanme.nmap.org belong to the Nmap Project, which is not affiliated with and does not endorse superbot or this capture. [Download](https://superbot.gg/download) ## One live connection sample **Claim**16 live connections in one sample Actual prompt ``` which apps on this Mac are talking to the internet right now, and what are they sending? ``` ### Observed Process, destination and volume metadata A 10-second sample without root, plus a 16-second connection scan ### Not established - Payload contents - Continuous monitoring or blocking [Download the connection recording](https://superbot.gg/site/assets/local-security-review/egress.mp4?v=1) Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe and captions. Transcript and capture notes Take, date and environment 16:9-0641e05e; 2026-10-24T02:15:04Z; desktop dev; real Superbot Helper 1.1.6-dev.60, protocol 1 Tools and versions lsof and nettop; both tool versions not recorded Finding film range 00:09.355-00:18.373, spanning time-compressed answer assembly and the held observations Material edits Source 0.000-0.040 s trimmed; 160.766 s wait compressed to 1.200 s; 18.373 s editorial timeline Film SHA256 `64dbc42907a6af61b248c361f6e70826d3ece0aff89771e17b993cccd05c3e4b` Evidence note SHA256 `69925f54e4929f1bd88114ab47201910e51fd05403edadfe1f34068e513f511c` [Read the public evidence note](https://superbot.gg/site/assets/local-security-review/egress.txt?v=1) [Download](https://superbot.gg/download) ## Plaintext keys reported **Claim**Two plaintext API keys reported Actual prompt ``` scan this mac for anything an attacker could use and tell me the fix ``` ### Observed Two Anthropic API keys in plaintext, plus five smaller exposures E2E Helper fixture, not independent scanner certification ### Not established - Key validity - Rotation, file changes or other remediation [Download the key review recording](https://superbot.gg/site/assets/local-security-review/keys.mp4?v=1) Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe, captions and a brief blur. Transcript and capture notes Take, date and environment 16:9-7779ffe7; 2026-10-23T12:14:25Z; desktop dev; E2E Helper fixture Tool and version E2E Helper fixture; fixture version not recorded Finding film range 00:05.463-00:13.122, including the fixture answer and the delivered blur interval Material edits Source 0.000-5.793 s trimmed; 69.729 s wait compressed to 1.200 s; blur at 00:06.3507-00:06.5305; 13.122 s editorial timeline Film SHA256 `6c2c72fa144fdc095d44fc06555e35dafc9bae66d3b0e8557a93fc4466b97531` Evidence note SHA256 `ffec83b2178e15fbbabb2f1ade3dae4e9465a5e4bafdbb3998be4471d7632b8b` [Read the public evidence note](https://superbot.gg/site/assets/local-security-review/keys.txt?v=1) Anthropic is not affiliated with and does not endorse superbot or this fixture capture. [Download](https://superbot.gg/download) ## Pseudocode and C exports **Claim**45 functions and 45 exported C files Actual prompt ``` Decompile /bin/cat for me: list its functions, decompile one function, then export the code so I can reuse it. ``` ### Observed 45 functions: 11 defined and 34 import thunks FUN_10000070c pseudocode in cat_main.c, plus 45 exported C files The hub lane rejected the sample path; direct PyGhidra produced the export ### Not established - Original source recovery or runtime behavior - Exported-C correctness or a working hub lane Decompiler output is an approximation [Download the decompile recording](https://superbot.gg/site/assets/local-security-review/decompile.mp4?v=1) Silent recording.Material edits: trim, time-compressed wait, 16:9 reframe, answer crop, captions and end card. Transcript and capture notes Take, date and environment 16:9-d8a4183d; 2026-10-25T00:36:49.223Z; desktop dev; real Superbot Helper 1.1.6-dev.60 (protocol 1), not a fixture Engine and version Ghidra 12.1.2 PUBLIC via PyGhidra 3.1.0; authorized /bin/cat x86_64 Mach-O slice Function inventory range Output 00:06.368-00:06.431466; take 154.958-214.959 s Selected pseudocode range Output 00:06.368; take 184.959-194.978 s Export and answer range Output 00:06.368-00:23.135; take 214.959-250.886 s Material edits Source 0.000-9.790 s trimmed; 219.161 s wait compressed to 1.200 s; answer crop excludes unrelated cards; 25.935 s editorial timeline Film SHA256 `46f4cba48dc3d6d2ffde2cc4ae2a5f99f42fce94d5711aa9a0e062fb3bf5e0c6` Evidence note SHA256 `8ada225ed918c7cec719fd2a219fe12e1371d5f60fc42429d473d95a1163d24c` [Read the public evidence note](https://superbot.gg/site/assets/local-security-review/decompile.txt?v=1) [Download](https://superbot.gg/download)