There is a YC company that makes a coding interview tool. They want you to run their CLI on your machine and trust that it won't do anything malicious, when in fact it installs a bunch of things onto your machine without consent, scans processes, and intercepts requests from AI tools. It's crazy that people think this is acceptable.
Maybe it's a pen test such that if the CLI can phone home you fail, to weed out candidates with weak security fu.
Just that fact that the company expects a candidate to even have their own machine is egregious.