@agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.4
Read-only Po server payload for Linux arm64 sandbox containers, mounted at /opt/po and run with Node 24.
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe manifest has no install-time lifecycle hook, and inspection of the named runtime files found no concrete attack behavior. The identified network request is an OAuth token exchange with OpenAI, while the startup settings cleanup is limited to Po-owned entries.
Decision evidence
public snapshot- package.json defines only a build script, with no install lifecycle hook.
- The server extension registers resources and tools supplied by the active session and ties their execution to its lifecycle.
- The token request posts to OpenAI’s authentication endpoint; the source identifies the endpoint as the OpenAI auth service.
- The runtime’s server startup removes legacy Po entries from Pi settings; the cleanup preserves unrelated settings.
- The reviewed supporting modules configure logging and detect a running editor for editor integration.
Source & flagged code
9 flaggedThe scanner resource watchdog stopped semantic analysis before full coverage; route this package to AI without publishing a static verdict.
package.json defines only a build script, with no install lifecycle hook.
package.jsonView on unpkg · L37Findings
Affected versions and remediation
This report applies to @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.4.
See all versions of @agimon-ai/po-container-runtime-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.