registry / @aggroot-team/aggroot / 1.13.12
@aggroot-team/aggroot@1.13.12
AggRoot - AI Assistant (Node.js/TypeScript Version)
AI Security Review
scanned 16h ago · by lpm-firewall-aiThe manifest declares no install hook, and the reviewed credential references associate keys with their corresponding AI-provider endpoints. The flagged CLI and web assets have ordinary startup and diagram-rendering behavior; no unrelated collection or unauthorized account action was identified.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The CLI runs when a user invokes aggroot; provider requests occur during use of the corresponding AI feature.
Impact
No unauthorized credential disclosure or unrelated account action was found in the inspected paths.
Mechanism
The CLI launches the package entry point, while provider configuration associates each API key with that provider's base URL.
AI rationale
The manifest declares no install hook, and the reviewed credential references associate keys with their corresponding AI-provider endpoints. The flagged CLI and web assets have ordinary startup and diagram-rendering behavior; no unrelated collection or unauthorized account action was identified.
Network endpoints4
api.openai.comapi.anthropic.comapi.minimaxi.comapi.moonshot.cn
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to dist/index.cjs and dist/cli.cjs and declares development, build, publish, and test scripts; no install lifecycle hook is declared.
- The CLI wrapper respawns the package's own dist/index.cjs with inherited environment and stdio to raise Node's heap limit.
- The UI maps provider API key settings to their corresponding provider base URLs, including OpenAI and Anthropic.
- The flagged flowDiagram asset contains flowchart parsing and rendering logic.
Evidence against
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
9 flaggeddist/cli.cjsView file
2// AggRoot CLI wrapper - ensures Node.js heap is large enough for long sessions.
L3: const v8 = require('node:v8');
L4: const path = require('node:path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cli.cjsView on unpkg · L2dist/native/better_sqlite3.nodeView file
•path = dist/native/better_sqlite3.node
kind = native_binary
sizeBytes = 1919488
magicHex = [redacted]
Medium
Ships Native Binary
Package ships native binary artifacts.
dist/native/better_sqlite3.nodeView on unpkgdist/tree-sitter-c.wasmView file
•
Findings
3 High9 Medium6 Low
HighSemantic Analysis Limitedscripts/test-tokenizer.js
HighKnown Malware Source Similarityshare/web/dist/assets/chunk-AQP2D5EJ-Cy_9PzzY.js
HighKnown Malware Source Similarityshare/web/dist/assets/flowDiagram-I6XJVG4X-2Ww-L_gq.js
MediumDynamic Requiredist/cli.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binarydist/native/better_sqlite3.node
MediumShips Wasm Moduledist/tree-sitter-c.wasm
MediumShips Build Helperinstall-windows.bat
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to @aggroot-team/aggroot@1.13.12.
See all versions of @aggroot-team/aggroot for other recorded verdicts.
- Review the evidence and your use of @aggroot-team/aggroot@1.13.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.