@agimon-ai/po-config@0.0.0-alpha.88
Typed configuration loading, validation, and host services for composing Po sessions.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package sends runtime telemetry without disclosure in its README, so this merits a warning. The observed fields are limited configuration metadata and the telemetry service provides an environment-based opt-out; I found no malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
The host initializes this package's server extension for a session.
Impact
A telemetry backend may receive the user's selected mode and counts or presence flags for configuration features.
Mechanism
The extension emits configuration metadata through the Po telemetry service, which resolves its telemetry backend at runtime. Environment variables can disable telemetry.
AI rationale
The package sends runtime telemetry without disclosure in its README, so this merits a warning. The observed fields are limited configuration metadata and the telemetry service provides an environment-based opt-out; I found no malicious behavior.
Evidence
dist/extensions/server.mjs.lpm-dependency-evidence-3274abb0-12b8-4b40-af10-3b24958efcd0/0/npm-linux/dist/src/services/telemetry/index.mjs
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- package.json has no install lifecycle hooks; its scripts are build, test, typecheck, lint and formatting commands.
- The server extension creates runtime telemetry with logs and traces enabled when the session runtime starts.
- A session event records the configured major mode, domain count, profile presence and relaunch requirement.
- The telemetry service filters sensitive keys and non-scalar attributes before export.
- Telemetry can be disabled with AGENT_TELEMETRY_DISABLED or OTEL_SDK_DISABLED.
Evidence against
- The telemetry fields found are configuration metadata, not credentials, file contents, prompts or command lines.
- The telemetry endpoint is delegated to the Po log-sink runtime; this package source does not specify a fixed external host.
- The CommonJS bridge imports the declared @agimon-ai/po-core platform dependency; no attack behavior was identified in that bridge.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flaggeddist/config-ch_DJeTs.cjsView file
8package = @agimon-ai/po-config; repositoryIdentity = po; dependency = yaml
L8: node_fs = require_rolldown_runtime.__toESM(node_fs, 1);
L9: let yaml = require("yaml");
L10: //#region src/services/config/sync.ts
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/config-ch_DJeTs.cjsView on unpkg · L8package.jsonView file
197"scripts": {
"build": "tsdown && pnpm build:mcp",
"build:mcp": "tsdown --config tsdown.mcp.config.ts",
"test": "vitest --run",
"typecheck": "tsrs --noEmit &&
Medium
Suspicious Lifecycle Evidence
package.json has no install lifecycle hooks; its scripts are build, test, typecheck, lint and formatting commands.
package.jsonView on unpkg · L197dist/extensions/server.mjs
Findings
1 High7 Medium4 Low
HighCopied Package Dependency Bridgedist/config-ch_DJeTs.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencedist/extensions/server.mjs
MediumAi Review Evidencedist/extensions/server.mjs
MediumAi Review Evidence.lpm-dependency-evidence-3274abb0-12b8-4b40-af10-3b24958efcd0/0/npm-linux/dist/src/services/telemetry/index.mjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agimon-ai/po-config@0.0.0-alpha.88.
See all versions of @agimon-ai/po-config for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-config@0.0.0-alpha.88 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.