
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
@entrydesk/cli
Advanced tools
Command-line client for EntryDesk. Includes interactive chat, tool output rendering, and scripting-friendly JSON output.
# Install the CLI
npm install -g @entrydesk/cli
# Install Playwright globally (required for browser-based login)
npm install -g playwright
# Install Chromium browser and system dependencies
npx playwright install chromium --with-deps
The Playwright browser is required for the browser-based OAuth login flow (entrydesk login).
Build and run from the repo:
pnpm --filter @entrydesk/cli build
pnpm --filter @entrydesk/cli start -- chat -i
Interactive chat is also the default when no command is provided:
entrydesk
entrydesk login
entrydesk login --google
entrydesk login --email <email> --password <password>
entrydesk status
entrydesk logout
By default, EntryDesk CLI stores credentials in the OS keychain when available.
If the keychain is unavailable, it falls back to an encrypted file at
~/.entrydesk/profiles/<profile>/credentials.json.
To force file storage (for example, in CI), set
ENTRYDESK_FORCE_FILE_STORAGE=true.
Login requires HTTPS by default. For local development against an HTTP API,
set ENTRYDESK_ALLOW_INSECURE_LOGIN=true.
entrydesk chat -m "Hello" --model <model>
entrydesk chat -a <agent>
entrydesk chat -c 1 -m "Follow up"
entrydesk chat -i
entrydesk chat -i --web-search # Enable web search
entrydesk chat -i --no-sandbox # Disable sandbox
entrydesk chat -i --connectors id1,id2 # Use specific connectors
Piping input and output:
echo "Hello" | entrydesk chat --model <model>
entrydesk chat -m "Hi" --model <model> --plain
entrydesk chat -m "Hi" --model <model> --output stream-json
entrydesk workspaces
entrydesk workspaces switch <workspaceId> # Switch to a workspace
entrydesk models
entrydesk agents
entrydesk connectors
entrydesk skills
entrydesk chats
entrydesk chats 1
entrydesk mcp
entrydesk mcp --http --port 3100
entrydesk skills # List all available skills
entrydesk skills --me # List only skills created by you
entrydesk skills upload my-skill.zip # Upload a skill zip file
entrydesk skills upload ./my-skill # Upload a skill folder (auto-zipped)
entrydesk skills delete skill-123 # Delete a skill you own
entrydesk skills --json # Output in JSON format
entrydesk budget # Show current workspace budget
entrydesk budget get # Get workspace budget
entrydesk budget set 100.00 # Set workspace budget to $100
entrydesk budget clear # Remove workspace budget
entrydesk budget --json # Output in JSON format
entrydesk usage # Show usage by all users, sorted by cost
entrydesk usage --limit 10 # Show top 10 users
entrydesk usage --sort-by operations # Sort by operation count
entrydesk usage --json # Output in JSON format
entrydesk agents # List available agents
entrydesk agents --json # Output in JSON format
entrydesk agents create --name "My Agent" --description "..." --system-prompt "..." --model-id <modelId>
entrydesk agents update <agentId> --name "New Name" --description "..." --system-prompt "..." --model-id <modelId>
entrydesk agents delete <agentId>
entrydesk config
entrydesk config set apiUrl http://localhost:3200
entrydesk config set hubUrl http://localhost:3000
entrydesk config unset apiUrl
entrydesk profile # List profiles
entrydesk profile create staging # Create a profile
entrydesk profile use staging # Switch active profile
entrydesk profile show staging # Show profile details
entrydesk profile clone default staging # Clone config defaults (no credentials)
entrydesk profile delete staging
# Run a single command against a specific profile without switching
entrydesk status --profile staging
entrydesk chat -i --profile staging
pnpm --filter @entrydesk/cli dev
pnpm --filter @entrydesk/cli lint
pnpm --filter @entrydesk/cli typecheck
FAQs
EntryDesk CLI - Interact with EntryDesk from your terminal
We found that @entrydesk/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.