registry / @agimon-ai/po-container-runtime-linux-arm64 / 0.0.1-alpha.38
@agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.38
Read-only Po server payload for Linux arm64 sandbox containers, mounted at /opt/po and run with Node 24.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package is a platform-specific Po server payload with no install lifecycle hook. Its startup and OAuth behavior match the declared runtime purpose, and the flagged .npmrc and foreign-host strings resolve to protective configuration and bundled library fixtures.
Static reason
The scanner resource watchdog stopped analysis before complete coverage. This unresolved result requires AI review and must not be published as clean, warn, or block.
Trigger
The server behavior runs when the configured serve entry is launched; ChatGPT OAuth is part of an explicit sign-in flow.
Impact
The observed behavior serves the packaged application and supports user sign-in; no malicious collection or unrelated account action was found.
Mechanism
The launcher supervises the Po server and initializes its agent directory. The inspected OAuth code posts tokens to auth.openai.com for ChatGPT sign-in.
AI rationale
The package is a platform-specific Po server payload with no install lifecycle hook. Its startup and OAuth behavior match the declared runtime purpose, and the flagged .npmrc and foreign-host strings resolve to protective configuration and bundled library fixtures.
Network endpoints1
auth.openai.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes package metadata and a build script; it has no install lifecycle script.
- The runtime configuration identifies the payload as a Linux ARM64 Po server launched through serve.mjs.
- The server entry initializes its agent directory and then starts the server when launched.
- The startup code sets Pi's agent directory; its test reset behavior is gated on test mode and an explicit environment flag.
- The ChatGPT sign-in hint directs users to Settings or /login.
- The OAuth token endpoint is auth.openai.com, the service used by the described ChatGPT sign-in flow.
Evidence against
- The flagged .npmrc occurrence is in Vite's list of files denied by the development server.
- The foo.com occurrences are URL parsing fixtures, not requests to that host.
Behavioral surface
Source & flagged code
9 flaggedsource
•stage = scanner_worker; reason = analysis_timeout
High
Semantic Analysis Limited
The scanner resource watchdog stopped semantic analysis before full coverage; route this package to AI without publishing a static verdict.
package.jsonView file
30"exports": {
"./container-runtime.json": "./container-runtime.json",
"./package.json": "./package.json"
},
"publishConfig": {
"access": "public"
},
"scripts": {
"build": "PO_RUNTIME_KIND=container PO_RUNTIME_TARGET=linux-arm64 PO_RUNTIME_OUT_DIR=\"$PWD/runtime\" pnpm -
Low
Suspicious Lifecycle Evidence
The manifest exposes package metadata and a build script; it has no install lifecycle script.
package.jsonView on unpkg · L30container-runtime.jsonView file
1{
"target": "linux-arm64",
"payload": "runtime",
"mountPath": "/opt/po",
"node": ">=24",
"entry": "po/dist/bin/serve.mjs",
"environment": {
"NODE_PATH": "/opt/po/node_modules:/opt/po/native/node_modules",
"PO_PACKAGE_ROOT": "/opt/po/node_modules/@agimon-ai/po"
Findings
1 High8 Low
HighSemantic Analysis Limited
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencecontainer-runtime.json
LowAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/bin/serve.mjs
LowAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/bin/agentDirectory.mjs
LowAi Review Evidenceruntime/chunks/backgroundSync-D2Zdnx3u.mjs
LowAi Review Evidenceruntime/chunks/backgroundSync-D2Zdnx3u.mjs
LowSuspicious Lifecycle Evidenceruntime/chunks/node-D7mTngEd.mjs
LowAi Review Evidenceruntime/chunks/node-D7mTngEd.mjs
Affected versions and remediation
This report applies to @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.38.
See all versions of @agimon-ai/po-container-runtime-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.38 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.