安全客•August 27, 2026•🇨🇳Translated from Chinese

Yisaqi Automation Magician Delivers Self-Healing RPA to Fix Low ROI in Enterprise AI Agents

Since 2026, intelligent agents have become the hottest keyword in enterprise IT procurement. However, a recent public review by Meituan core local commerce CEO Wang Puzhong brought the issue of low agent ROI into sharp focus. Wang revealed that Meituan's February-March "full-staff shrimp farming" initiative caused compute bills to surge, with daily token consumption reaching tens of millions of yuan, while AI-generated errors infiltrated business workflows and disrupted operational decisions.

MIT's August report "The Generative AI Divide" showed that despite 30-40 billion dollars spent on generative AI, 95 percent of pilots produced no measurable commercial returns. The core problem is that most office agents excel at dialogue and content generation but lack the ability to operate across legacy enterprise systems that do not expose APIs or MCP interfaces.

Yisaqi recently launched Automation Magician, a core agent within its APA (Agentic Process Automation) platform. Unlike general agents limited to "dialogue-to-generation," Automation Magician covers the full lifecycle: dialogue, exploration, development, test-run verification, delivery, operation, self-healing, and knowledge precipitation.

The agent accepts natural-language task descriptions, analyzes application interfaces, dynamically plans operation paths, and selects robust element-locating strategies using ID, text, and visual features. After generation, it automatically tests the flow, applies a proprietary test system that runs three times faster and ten times more cost-effectively than computer-use models, and iterates until success criteria are met.

When systems change or controls are updated, the self-healing "reflection loop" replans paths, updates locators, adds branch logic, and resumes execution while producing a repair report. Completed flows can be exported as clean, commented scripts that integrate with existing RPA systems and become reusable enterprise Skills that survive staff turnover.

Security features include encrypted storage of credentials, handling of all captcha types, centralized permission-controlled resource management, full audit trails, and secondary confirmation for high-risk actions. Model calls route through Microsoft Azure operated by 21Vianet in China rather than direct OpenAI endpoints, and runtime execution uses deterministic scripts to eliminate repeated model invocations and associated risks.

At Jiage Food, employees now describe tax-reporting needs in plain language; Automation Magician extracts data, prepares filings, and submits them across heterogeneous systems while automatically adapting to platform updates. A large central SOE financial shared service center has deployed more than 5,800 automated flows, achieving 85 percent overall automation and 90 percent efficiency gains in invoice verification and voucher creation.

Zhongtian Technology, a manufacturer with over 100 billion yuan in annual revenue, runs 22 digital robots across 112 scenarios including quality inspection, contract management, and bidding. The deployment has delivered monthly savings of 90,000 yuan in labor costs, 11 days of work time, and an annual benefit exceeding one million yuan, with overall process efficiency up more than 80 percent.

Related articles

Habr•Other

Rostelecom Refactors InfoSec Careers: Matching Employee Skills to Evolving Business Priorities

Rostelecom's information security block developed a systematic approach to reassess employee expertise and redirect talent to new roles when business structures change rapidly. In one case, an architect hired for a specific team was reassigned after the unit was disbanded, initially moving to a similar position that did not fully align with his broader competencies. HR-business partner Olga Lapshina examined the specialist's full background, including prior work in audits, methodology development, regulatory documentation, university teaching, and scientific research, plus strong mentoring abilities with younger staff. These skills matched the needs of the methodology department, leading to a transfer supported by an individual development plan and a mentor via the internal Tochka Rosta platform. Within two months the employee contributed improvements that accelerated preliminary InfoSec audits by 30 percent and risk assessments by 20 percent while expanding threat scenario coverage by 10 percent. The initiative demonstrates Rostelecom's emphasis on horizontal career movement and retention of experienced professionals through structured career tracks.

Habr•Other

How to Avoid Becoming the Hero of 'My Program Deleted 800 GB': Safe Recursive Deletion in Bash and Python

A recent Habr article examines dangerous patterns in recursive file deletion scripts that have caused massive data loss incidents, including an 800 GB wipe triggered by Telegram Desktop on Windows. The piece analyzes classic mistakes such as empty variables in rm commands and extra spaces that turned single paths into multiple destructive arguments, referencing the 2015 Steam Linux bug and the 2011 Bumblebee installer error. It provides hardened Bash templates using set -euo pipefail, ${VAR:?} checks, realpath validation, and --one-file-system flags to prevent deletion of forbidden directories or symlinked targets. The Python section introduces a safe_rmtree wrapper that enforces root boundaries, rejects symlinks, uses resolve(strict=True), and checks shutil.rmtree.avoids_symlink_attacks before proceeding. Additional recommendations include dry-run modes, marker files, temporary directory usage, and logging to make deletion operations auditable and reversible where possible.

AntiMalware•Other

Hackers tamper with refrigeration units in European supermarkets, setting temperatures to +50 °C

Attackers gained unauthorized access to refrigeration and freezer control systems in supermarkets across several European countries, including Sweden, Belgium, Luxembourg, and Estonia. In multiple locations they altered temperature settings to +50 °C, risking widespread spoilage of perishable goods. The incidents primarily affected older, unpatched Danfoss controllers that had been connected to networks for remote maintenance. Estonian manufacturer Kitman Coldtech reported that one attack on a legacy Danfoss system was detected and stopped within approximately ten minutes, preventing any damage. Similar intrusions were confirmed by Swedish chains ICA and Coop, following earlier incidents in French supermarkets in October that resulted in product losses. Experts note that legacy industrial controllers remain attractive targets because they are often left exposed once placed online for convenience.

Habr•Other

AmneziaWG Container for MikroTik Routers Delivers Top Performance Six Months After Launch

A developer released an AmneziaWG container for MikroTik devices in February 2026 and has since added major improvements in speed, protocol support, and stability. The lightweight container leverages the router's native WireGuard implementation for cryptography while handling AmneziaWG obfuscation in software. Performance now reaches 250-350 Mbit/s on models such as Hap Ax3 and RB5009B after switching to C code and increasing buffer sizes with RouterOS 7.24. New features include server mode for connecting multiple MikroTik devices, random port hopping, IPv6 support, dynamic DNS, and offline configuration. The project survived an early GitHub ban caused by test scripts and has grown to over 370 stars while remaining fully offline and privacy-focused.