registry / @agentdock/daemon / 0.0.94
@agentdock/daemon@0.0.94
PC daemon + CLI for AgentDock — ACP abstraction, TransportHandler, process management
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged persistence is part of the daemon's login-start behavior and is gated on credentials, with an environment variable opt-out. No install hook, import-time attack, or unrelated data collection was identified in the reviewed paths.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Autostart follows daemon startup when credentials are present; package download and installation occur through the explicit upgrade command.
Impact
The daemon can run at user login, and an explicitly requested upgrade replaces package files.
Mechanism
The daemon registers a user-level login service. The upgrade path checks and installs a package version from npm.
AI rationale
The flagged persistence is part of the daemon's login-start behavior and is gated on credentials, with an environment variable opt-out. No install hook, import-time attack, or unrelated data collection was identified in the reviewed paths.
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines a library entry and CLI binary, with no lifecycle scripts declared.
- The library entry re-exports functions from modules; it contains no startup action.
- Autostart is skipped when disabled, for enterprise or profile-based paths, or when credentials are absent; otherwise it registers the daemon for user login.
- The CLI invokes upgrade handling only for the explicit upgrade command.
Evidence against
- The daemon can register itself to start at user login when credentials are present.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/subagentIds.jsView file
1"use strict";import{createHash as t}from"node:crypto";export function makeStableSubagentId(e){return`c${t("sha1").update(e).digest("hex").slice(0,23)}`}
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/subagentIds.jsView on unpkg · L1dist/autostart.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @agentdock/daemon@0.0.69
matchedIdentity = npm:QGFnZW50ZG9jay9kYWVtb24:0.0.69
similarity = 0.367
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/autostart.jsView on unpkg1Trigger-reachable persistence chain: manifest.bin -> dist/cli.js -> dist/autostart.js
L1: "use strict";import{execFileSync as y,execSync as n}from"node:child_process";import i from"node:fs";import a from"node:path";import{fileURLToPath as x}from"node:url";import{isEnter...
L2: KillMode=process`),i.writeFileSync(e,r,"utf8"),n("systemctl --user daemon-reload",{stdio:"ignore"})}export function buildPlistContent(e,t,r,c){const o=r?[e,"--import","tsx",t]:[e,t...
...
L6: `)+`
L7: `}function E(e,t,r){return r?`"${e}" "--import" "tsx" "${t}"`:`"${e}" "${t}"`}const $="HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";export function isEnabled(){if(proce...
Findings
1 Critical5 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/autostart.js
HighSame File Env Network Executiondist/ensureDaemon.js
HighCommand Output Exfiltrationdist/ensureDaemon.js
HighTrigger Reachable Command Output Exfiltrationdist/ensureDaemon.js
HighTrigger Reachable Persistencedist/autostart.js
HighRuntime Package Installdist/triggerUpgrade.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/autostart.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptodist/subagentIds.js
LowFilesystem
Affected versions and remediation
This report applies to @agentdock/daemon@0.0.94.
See all versions of @agentdock/daemon for other recorded verdicts.
- Review the evidence and your use of @agentdock/daemon@0.0.94 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.