registry / @agentgrit/core / 0.1.1

@agentgrit/core@0.1.1

Self-learning engine that makes AI coding agents improve over time

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs `agentgrit init --bootstrap`, `agentgrit rules promote`, or `agentgrit daemon start/run`.

Impact

Can cause future Claude Code sessions to run agentgrit capture commands and can alter agent instructions with generated rules.

Mechanism

explicit CLI setup of Claude hooks, CLAUDE.md rules, scheduler, and LLM/Langfuse sync

Rationale

Source inspection shows guarded, explicit agent-extension behavior with real control-surface impact, so a warn is appropriate; there is no evidence of unconsented install-time mutation, credential theft, destructive behavior, or remote payload execution.

Evidence

package.jsondist/agentgrit.jsagentgrit.config.tsrubrics/starter.jsonREADME.md~/.claude/settings.json~/.claude/CLAUDE.md~/.agentgrit/config.json~/.agentgrit/signals/*.jsonl~/.agentgrit/state/knowledge-graph.json~/Library/LaunchAgents/com.agentgrit.daemon.plist~/.config/systemd/user/com.agentgrit.daemon.service~/.config/systemd/user/com.agentgrit.daemon.timer

Network endpoints5

api.openai.com/v1/chat/completionsapi.anthropic.com/v1/messagesgenerativelanguage.googleapis.com/v1beta/models/us.cloud.langfuse.com/api/public/tracesus.cloud.langfuse.com/api/public/ingestion

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

dist/agentgrit.js: kt() adds Claude Code hooks to ~/.claude/settings.json for explicit `agentgrit init --bootstrap`.
dist/agentgrit.js: Dt()/promote path can append generated rules to ~/.claude/CLAUDE.md.
dist/agentgrit.js: daemon start installs LaunchAgent/systemd user scheduler files on explicit command.
dist/agentgrit.js: configured judge/Langfuse features use fetch to OpenAI, Anthropic, Gemini, and Langfuse endpoints with user-provided keys.

Evidence against

package.json has no preinstall/install/postinstall hooks; only prepublishOnly build.
dist/agentgrit.js dispatches commands from process.argv; no hidden install-time execution observed.
Network calls are aligned with documented LLM judging/Langfuse sync features and require configured credentials.
No credential harvesting, destructive deletion, remote payload loading, eval, or child_process execution found in inspected source.

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 2 file(s), 76.1 KB of source, external domains: api.anthropic.com, api.openai.com, us.cloud.langfuse.com, www.apple.com

Source & flagged code

1 flagged

dist/agentgrit.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

2import{createRequire as gi}from"node:module";var si=Object.defineProperty;var ci=(o)=>o;function li(o,n){this[o]=ci.bind(null,n)}var z=(o,n)=>{for(var t in n)si(o,t,{get:n[t],enumerable:!0,configurable:!0,set:li.bind(n,t)})};var O=(o,n)=>()=>(o&&(n=o(o=0)),n);var Q=gi(import.meta.url);var lo={};z(lo,{rotateFile:()=>on,readSignals:()=>j,createJsonlAdapter:()=>$i,appendSignal:()=>hn});import{existsSync as nn,mkdirSync as fi,statSync as mi,readFileSync as so,writeFileSync as dn,renameSync as co,unlinkSync as ui}from"fs";import{dirname as ai}from"path";async function hn(o,n){let t=ai(o);if(!nn(t)) ...

4`).filter((l)=>l.trim()),r=n?.offset??0,e=n?.limit!==void 0?r+n.limit:i.length,s=i.slice(r,e),c=[];for(let l of s)try{c.push(JSON.parse(l))}catch{}return c}async function on(o,n){if(!nn(o))return{rotated:!1};if(mi(o).size<=n)return{rotated:!1};let i=new Date().toISOString().replace(/[:.]/g,"-"),r=o+"."+i+".bak";return co(o,r),dn(o,""),{rotated:!0,archivePath:r}}function $i(){return{append:hn,read:j,rotate:on}}var q=()=>{};var zn={};z(zn,{statePath:()=>yi,stateDir:()=>N,signalsDir:()=>go,signalPath:()=>uo,rubricsDir:()=>mo,rubricPath:()=>di,resolveSignalDir:()=>h,projectStateDir:()=>ki,projectS ...

5`),i=n.dimensions.map((r)=>`"${r.name}": { "score": N, "reasoning": "..." }`).join(", ");return`You are evaluating the quality of AI-generated output.

7## Content to evaluate

8Input: ${wo(o.input,2000)}

9Output: ${wo(o.output,4000)}

11## Scoring dimensions

12For each dimension, score 1-5 and provide brief reasoning:

13${t}

15Return ONLY valid JSON:

16{${i}}`}function wo(o,n){return!o?"(empty)":o.length>n?o.slice(0,n)+"...":o}async function Li(o,n){let t={"Content-Type":"application/json"},i,r;if(n.provider

17`)+(o.length>0?`

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/agentgrit.jsView on unpkg · L3

18`:"")}function _i(o){return o.split(`

19`).filter((n)=>n.trim().length>0).map((n)=>{try{return JSON.parse(n)}catch{return null}}).filter((n)=>n!==null)}var ho=O(()=>{K()});var So={};z(So,{validateRubric:()=>ko,loadRubric:()=>Zi,composeRubrics:()=>Ti});import{readFileSync as Bi,existsSync as Vi}from"fs";function ko(o){let n=[];if(!o.version)n.push("missing version");if(typeof o.schemaVersion!=="number")n.push("missing or invalid schemaVersion");if(!Array.isArray(o.dimensions))return n.push("dimensions must be an array"),{valid:!1,errors:n};if(o.dimensions.length===0)n.push("dimensions must not be empty");let t=0,i=new Set;for(let e=0 ...

20`).find((l)=>l.startsWith("Assistant:"));if(c){let l=c.slice(11,80).trim();if(l.length>10&&!i.includes(l))i.push(l)}if(i.length>=2)break}let r=t.join("; "),e=i.length>

21`):JSON.stringify(s)}if(e.contents)t=JSON.stringify(e.contents)}else t=JSON.stringify(r)}return{systemPrompt:n.trim(),userPrompt:t.trim()}}var ln=null;var Bo=O(()=>{R()});var Vo={};z(Vo,{runReview:()=>An});import{existsSync as wr,readFileSync as Rr}from"fs";import{join as yr}from"path";function Ln(o){return o.toLowerCase().replace(/[^a-z0-9\s]/g,"").split(/\s+/).filter((n)=>n.length>1)}function dr(o,n){let t=Ln(o),i=Ln(n);if(t.length===0||i.length===0)return 0;let r=new Set(i);return t.filter((s)=>r.has(s)).length/Math.min(t.length,i.length)}function hr(o){let n=new Set(["the","is","at","of"," ...

22`)){let v=p.trim();if(!v)continue;try{let w=JSON.parse(v);if(typeof w.rating==="number")i.push({timestamp:w.timestamp??"",rating:w.rating,sentimentSummary:w.sentiment_summary??w.sentimentSummary})}catch{}}}let r=kr(i),e=0.4,s=3,c=4,l=i.filter((a)=>a.sentimentSummary),g

23`)){let r=i.indexOf(":");if(r===-1)continue;let e=i.slice(0,r).trim(),s=i.slice(r+1).trim();t[e]=s}return t}function fn(o){let n=o.toLowerCase();if(n.includes("hard stop")||n.includes("zero exceptions")||n.includes("critical"))return 5;if(n.includes("never")||n.includes("always")||n.includes("mandatory"))return 4;if(n.includes("must")||n.includes("required")||n.includes("important"))return 3;if(n.includes("should")||n.includes("prefer")||n.includes("typically"))return 2;return 1}function Tn(o){return br("md5").update(o).digest("hex").slice(0,8)}function mn(o,n,t){let i=`${o} ${n} ${t}`.toLower ...

Long lines were clipped for display.

Source & flagged code

1 flagged · loading source

dist/agentgrit.jsView file

3`,r=o+".tmp."+process.pid;dn(r,"");let e=nn(o)?so(o,"utf-8"):"";dn(r,e+i);try{co(r,o)}catch{try{ui(r)}catch{}throw Error(`Failed to atomically write signal to ${o}`)}}async functio... L4: `).filter((l)=>l.trim()),r=n?.offset??0,e=n?.limit!==void 0?r+n.limit:i.length,s=i.slice(r,e),c=[];for(let l of s)try{c.push(JSON.parse(l))}catch{}return c}async function on(o,n){i... L5: `),i=n.dimensions.map((r)=>`"${r.name}": { "score": N, "reasoning": "..." }`).join(", ");return`You are evaluating the quality of AI-generated output. ... L15: Return ONLY valid JSON: L16: {${i}}`}function wo(o,n){return!o?"(empty)":o.length>n?o.slice(0,n)+"...":o}async function Li(o,n){let t={"Content-Type":"application/json"},i,r;if(n.provider==="openai"){if(!n.api... L17: `)+(o.length>0?` ... L67: WantedBy=timers.target L68: `}async function nt(o){let n=process.platform;if(n==="darwin"){let t=Ho();if(!W(t))Po(t,{recursive:!0});let i=Gr(o);xn(Xn(),i)}else if(n==="linux"){let t=En();if(!W(t))Po(t,{recurs... L69: `);return}console.log(` Running one daemon cycle... ... L92: `)}R();import{existsSync as E,readFileSync as $n,readdirSync as Xr,writeFileSync as Er}from"fs";import{join as P}from"path";async functio

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/agentgrit.jsView on unpkg · L3

Findings

3 Medium6 Low

MediumNetwork

MediumEnvironment Vars

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/agentgrit.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/agentgrit.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

5`),i=n.dimensions.map((r)=>`"${r.name}": { "score": N, "reasoning": "..." }`).join(", ");return`You are evaluating the quality of AI-generated output.

7## Content to evaluate

8Input: ${wo(o.input,2000)}

9Output: ${wo(o.output,4000)}

11## Scoring dimensions

12For each dimension, score 1-5 and provide brief reasoning:

13${t}

15Return ONLY valid JSON:

16{${i}}`}function wo(o,n){return!o?"(empty)":o.length>n?o.slice(0,n)+"...":o}async function Li(o,n){let t={"Content-Type":"application/json"},i,r;if(n.provider

17`)+(o.length>0?`

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/agentgrit.jsView on unpkg · L3

18`:"")}function _i(o){return o.split(`

20`).find((l)=>l.startsWith("Assistant:"));if(c){let l=c.slice(11,80).trim();if(l.length>10&&!i.includes(l))i.push(l)}if(i.length>=2)break}let r=t.join("; "),e=i.length>

Long lines were clipped for display.