@agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.51
Read-only Po server payload for Linux arm64 sandbox containers, mounted at /opt/po and run with Node 24.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe server enables runtime telemetry and records notice messages, with destinations supplied by configuration or endpoint discovery. The README does not disclose this collection, so this merits a warning; the reviewed code did not show credential theft or a fixed external collector.
Static reason
The scanner resource watchdog stopped analysis before complete coverage. This unresolved result requires AI review and must not be published as clean, warn, or block.
Trigger
Starting the packaged Po server and runtime events such as notices or event-loop delays.
Impact
Operational event data, including notice messages, may be sent to the configured or discovered telemetry endpoint without the package README disclosing this behavior.
Mechanism
The server creates telemetry and records runtime events; an OTLP or log-sink endpoint can come from environment settings or endpoint discovery. Telemetry has environment-variable disable switches.
AI rationale
The server enables runtime telemetry and records notice messages, with destinations supplied by configuration or endpoint discovery. The README does not disclose this collection, so this merits a warning; the reviewed code did not show credential theft or a fixed external collector.
Evidence
runtime/chunks/run-Bp6qR1yC.mjsruntime/chunks/node-CFzq1tsu-7qomVjOK.mjsruntime/chunks/poTelemetry-DqCLDCgw.mjsREADME.md
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The server starts telemetry during runtime and records notice messages as telemetry events.
- Telemetry can use OTLP or log-sink endpoints from the environment or endpoint discovery; it can be disabled with AGENT_TELEMETRY_DISABLED or OTEL_SDK_DISABLED.
- The telemetry layer sanitizes event attributes and reduces errors to type and code fields.
- The package README describes the container payload and server launch but does not disclose telemetry.
Evidence against
- The package has no install, preinstall, or postinstall hook; its only script is a build script.
- The package exports only its container-runtime metadata and package manifest; it is a read-only runtime payload.
- No fixed external telemetry host or credential exfiltration was identified in the reviewed paths.
Behavioral surface
Source & flagged code
7 flaggedsource
•stage = scanner_worker; reason = analysis_timeout
High
Semantic Analysis Limited
The scanner resource watchdog stopped semantic analysis before full coverage; route this package to AI without publishing a static verdict.
runtime/chunks/run-Bp6qR1yC.mjsView file
109560LOG_SINK_INSTANCE: "global"
};
const executionBudget = createServerExecutionBudget(baseEnvironment);
await ensureGlobalLogSink({
cwd: baseCwd,
env: baseEnvironment,
notice: rawNotice
}).catch((error) => rawNotice(`Global log sink unavailable: ${error instanceof Error ? error.message : String(error)}`));
const telemetry = createServerTelemetry({
cwd: baseCwd,
env: baseEnvironment,
warn: rawNotice
});
const notice = (message) => {
rawNotice(message);
telemetry.recordEvent(
Medium
Ai Review Evidence
The server starts telemetry during runtime and records notice messages as telemetry events.
runtime/chunks/run-Bp6qR1yC.mjsView on unpkg · L109560109807if (delay >= 100) telemetry.recordEvent("po_server.event_loop_delay", {
duration_ms: Math.round(delay),
job_name: jobs
}).catch((error) => notice(`event loop telemetry failed: ${String(error)}`));
}, 1e3);
eventLoopMonitor.unref();
const harnessTelemetry = createHarnessTelemetry({
cwd: baseCwd,
Findings
1 High6 Medium
HighSemantic Analysis Limited
MediumAi Review Evidenceruntime/chunks/run-Bp6qR1yC.mjs
MediumAi Review Evidenceruntime/chunks/run-Bp6qR1yC.mjs
MediumAi Review Evidenceruntime/chunks/node-CFzq1tsu-7qomVjOK.mjs
MediumAi Review Evidenceruntime/chunks/poTelemetry-DqCLDCgw.mjs
MediumAi Review Evidenceruntime/chunks/poTelemetry-DqCLDCgw.mjs
MediumAi Review EvidenceREADME.md
Affected versions and remediation
This report applies to @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.51.
See all versions of @agimon-ai/po-container-runtime-linux-arm64 for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-container-runtime-linux-arm64@0.0.1-alpha.51 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.