registry / @agentdock/daemon / 0.0.95
@agentdock/daemon@0.0.95
PC daemon + CLI for AgentDock — ACP abstraction, TransportHandler, process management
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged persistence supports the package’s daemon function and only runs when credentials exist; telemetry starts disabled. Runtime package installation is part of the CLI’s explicit upgrade command, and no malicious data flow or unrelated execution was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI’s start or upgrade commands, or startup of the daemon they launch.
Impact
No unauthorized data collection, credential transfer, account action, or unrelated persistence was identified.
Mechanism
Daemon autostart is gated by existing credentials and an opt-out variable. The package install runs in the explicit upgrade flow.
AI rationale
The flagged persistence supports the package’s daemon function and only runs when credentials exist; telemetry starts disabled. Runtime package installation is part of the CLI’s explicit upgrade command, and no malicious data flow or unrelated execution was found.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a daemon library and CLI entry point.
- Autostart setup is called from daemon startup and is skipped without stored credentials or when AGENTDOCK_NO_AUTOSTART=1.
- The daemon’s telemetry collector is initialized disabled.
- The package-manager install occurs in the upgrader, which the CLI invokes for the explicit upgrade command.
Evidence against
- Daemon startup writes a login service or registry entry to keep the daemon running; this matches the package’s stated daemon purpose.
- The upgrade path downloads and installs a package at runtime, but it is tied to the explicit upgrade command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/zombieReaper.jsView file
1"use strict";import{execSync as h}from"node:child_process";import{killProcessTreeByPid as g}from"./processTree.js";const k=process.platform==="win32";function C(){return k?P():[]}e...
High
Child Process
Package source references child process execution.
dist/zombieReaper.jsView on unpkg · L1dist/subagentIds.jsView file
1"use strict";import{createHash as t}from"node:crypto";export function makeStableSubagentId(e){return`c${t("sha1").update(e).digest("hex").slice(0,23)}`}
Low
Weak Crypto
Package source references weak cryptographic algorithms.
dist/subagentIds.jsView on unpkg · L1dist/autostart.jsView file
Findings
1 Critical6 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/autostart.js
HighChild Processdist/zombieReaper.js
HighSame File Env Network Executiondist/ensureDaemon.js
HighCommand Output Exfiltrationdist/ensureDaemon.js
HighTrigger Reachable Command Output Exfiltrationdist/ensureDaemon.js
HighTrigger Reachable Persistencedist/autostart.js
HighRuntime Package Installdist/triggerUpgrade.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/autostart.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Crypto
Affected versions and remediation
This report applies to @agentdock/daemon@0.0.95.
See all versions of @agentdock/daemon for other recorded verdicts.
- Review the evidence and your use of @agentdock/daemon@0.0.95 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.