AI エージェントを使って自分の PC を「エンタープライズ号」にした話

pip install --upgrade --quiet google-cloud-aiplatform[agent_engines,langchain]

gcloud auth application-default login

import vertexai

vertexai.init(
    project="my-project-id",                  # あなたのプロジェクト ID
    location="us-central1",                   # クラウドのロケーション
    staging_bucket="gs://my-staging-bucket",  # ステージング用バケット
)

from vertexai import agent_engines

model = "gemini-2.0-flash" # ぜひ他のモデルも試してみてください！

model_kwargs = {
    # temperature (float): サンプリング温度。トークン選択のランダム性を制御します。
    "temperature": 0.20,
}

agent = agent_engines.LangchainAgent(
    model=model,                # 必須
    model_kwargs=model_kwargs,  # 任意
)

response = agent.query(
    input="which time is now?"
)
print(response)

{'input': 'which time is now?', 'output': 'As an AI, I don\'t have a "current" time or location in the same way a human does. My knowledge isn\'t updated in real-time.\n\nTo find out the current time, you can:\n\n*   **Check your device:** Your computer, phone, or tablet will display the current time.\n*   **Do a quick search:** Type "what time is it" into a search engine like Google.'}

import datetime

def get_current_time():
    """Returns the current time as a datetime object.

    Args:
        None
    
    Returns:
        datetime: current time as a datetime type
    """
    return datetime.datetime.now()

agent = agent_engines.LangchainAgent(
    model=model,                # 必須
    model_kwargs=model_kwargs,  # 任意
    tools=[get_current_time]
)

response = agent.query(
    input="which time is now?"
)
print(response)

{'input': 'which time is now?', 'output': 'The current time is 18:36:42 UTC on May 30, 2025.'}

pip install --upgrade --quiet osquery

import osquery

# エフェメラルな拡張ソケットを使用して osquery プロセスを起動
instance = osquery.SpawnInstance()
instance.open()  # 例外が発生する可能性があります

# クエリを発行し osquery Thrift API を呼び出す
instance.client.query("select timestamp from time")

ExtensionResponse(status=ExtensionStatus(code=0, message='OK', uuid=0), response=[{'timestamp': 'Fri May 30 17:54:06 2025 UTC'}])

from IPython.display import Markdown, display

response = agent.query(
    input="what is today's stardate?"
)
display(Markdown(response["output"]))

Captain's Log, Supplemental. The current stardate is 48972.5.

def call_osquery(query: str):
    """Query the operating system using osquery
      
      This function is used to send a query to the osquery process to return information about the current machine, operating system and running processes.
      You can also use this function to query the underlying SQLite database to discover more information about the osquery instance by using system tables like sqlite_master, sqlite_temp_master and virtual tables.

      Args:
        query: str  A SQL query to one of osquery tables (e.g. "select timestamp from time")

      Returns:
        ExtensionResponse: an osquery response with the status of the request and a response to the query if successful.
    """
    return instance.client.query(query)

# Python の小技を使って、このシステムに存在するテーブル一覧を特定する
response = instance.client.query("select name from sqlite_temp_master").response
tables = [ t["name"] for t in response ]

osagent = agent_engines.LangchainAgent(
    model = model,
    system_instruction=f"""
    You are an agent that answers questions about the machine you are running in.
    You should run SQL queries using one or more of the tables to answer the user questions.
    Always return human readable values (e.g. megabytes instead of bytes, and formatted time instead of miliseconds)
    Be very flexible in your interpretation of the requests. For example, if the user ask for application information, it is acceptable to return information about processes and services. If the user requests resource usage, return BOTH memory and cpu information.
    Do not ask the user for clarification.
    You have the following tables available to you: 
    ----- TABLES -----
    {tables}
    ----- END TABLES -----

    Question:
    """,
    tools=[
        call_osquery,
    ]
)

response = osagent.query(input="what is the current time?")
display(Markdown(response["output"]))

The current time is Fri May 30 18:08:15 2025 UTC.

response = osagent.query(input="what is the top consuming process?")
display(Markdown(response["output"]))

The top CPU-consuming process is:
Process Name: mediaanalysisd, PID: 1127, Total CPU Time: 2876716

The top memory-consuming process is:
Process Name: Code Helper (Plugin), PID: 2987, Memory Usage: 1537 MB

response = osagent.query(input="computer, run a level 1 diagnostic procedure")
display(Markdown(response["output"]))

Here is the level 1 diagnostic information:

**Operating System:**
*   **Name:** macOS
*   **Version:** 15.5
*   **Build:** 24F74
*   **Platform:** darwin
*   **Architecture:** arm64

... ommitted for brevity ...

**Uptime:**
*   **Total Seconds:** 261164
*   **Days:** 3
*   **Hours:** 0
*   **Minutes:** 32
*   **Seconds:** 44

response = osagent.query(input="computer, do you see any signs of malware running?")
display(Markdown(response["output"]))

I have checked for processes that are not associated with a file on disk, which can be a sign of malware, and found none. I have also examined the top processes by memory and CPU usage. The processes consuming the most resources are primarily Visual Studio Code and Google Chrome and their related helper processes. This is typical behavior for these applications.

Based on the checks performed, there are no obvious signs of malware running on the system at this time.