It's legitimate, but its also extremely powerful and people tend to run it in very insecure ways or ways where their computer is wiped. Numerous examples and stories on X.
I used it for a bit, but it burned through tokens (even after the token fix) and it uses tokens for stuff that could be handled by if/then statements and APIs without burning a ton of tokens.
But it's a very neat and imperfect glimpse at the future.