registry / @agent-link/agent / 0.1.333
@agent-link/agent@0.1.333
AgentLink local agent CLI
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe postinstall hook delegates to package-owned setup gated on global npm installation, while inspected persistence is tied to an explicit service command. The flagged agent paths are scoped to Codex or project-specific Claude data, and the inspected source did not establish a concrete attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `agentlink-client service install` to register the agent for auto-start.
Impact
The agent can start automatically after the user requests service installation; no malicious effect was established.
Mechanism
The command creates a launch specification and installs the platform service entry; the launcher writes the service plist.
AI rationale
The postinstall hook delegates to package-owned setup gated on global npm installation, while inspected persistence is tied to an explicit service command. The flagged agent paths are scoped to Codex or project-specific Claude data, and the inspected source did not establish a concrete attack.
Evidence
launcher/launcher.cjs
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest routes the postinstall hook to a package-owned bridge script, and that script runs its setup only for global npm installs.
- Codex session titles are stored under the package configuration directory; Claude history and memory paths are scoped to the current user and project.
- Service persistence is exposed through the explicit `service install` command, which invokes service installation.
- The launcher writes a user service plist as part of that service setup.
- Inspected source did not establish credential theft, unrelated data exfiltration, or another concrete attack.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install-bridge.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/emergency-upgrade.jsView file
4import { join, posix } from 'path';
L5: import { gunzipSync } from 'zlib';
L6: export const RELEASE_MANIFEST_URLS = {
L7: latest: 'https://msclaude.ai/files/agent/latest.json',
L8: beta: 'https://msclaude.ai/files/agent/beta.json',
...
L179: }
L180: if (normalizedPath === 'package/package.json') {
L181: if (packageIdentity) {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/emergency-upgrade.jsView on unpkg · L4launcher/launcher.cjsView file
Findings
4 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighTrigger Reachable Persistencedist/service.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltalauncher/launcher.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelauncher/launcher.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/emergency-upgrade.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agent-link/agent@0.1.333.
See all versions of @agent-link/agent for other recorded verdicts.
- Review the evidence and your use of @agent-link/agent@0.1.333 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.