registry / @agent-link/server / 0.1.495

@agent-link/server@0.1.495

AgentLink relay server

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is an explicitly started local relay server with optional user-invoked service registration and an encrypted WebSocket proxy.

Static reason

No blocking static signals were detected.

Trigger

User runs `agentlink-server start` or explicitly runs `agentlink-server service install`.

Impact

Provides the documented relay and selected local-port tunneling functionality; no unconsented install-time action was found.

Mechanism

Local HTTP/WebSocket relay with optional OS service setup.

Rationale

Source inspection shows package-aligned relay, optional Entra authentication, and explicit service-management features. No install-time execution, exfiltration chain, remote code execution, stealth persistence, or AI-agent control-surface hijack was established.

Evidence

package.jsondist/service.jsdist/cli.jsdist/index.jsdist/tunnel.jsdist/entra.jsdist/config.jsdist/state-persistence.jsdist/ws-agent.jsdist/ws-client.jsdist/auth-manager.jsdist/http.jsweb/dist/assets/index-Bn_Nqxoz.jsweb/dist/assets/msalAuth-CNctxOXl.js

Network endpoints2

/${tenantId}/discovery/v2.0/keys

@agent-link/server@0.1.495

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code