@agimon-ai/po-container-runtime-linux-x64@0.0.1-alpha.33
Read-only Po server payload for Linux x64 sandbox containers, mounted at /opt/po and run with Node 24.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe startup migration intentionally retires the legacy Po directory, but its recursive cleanup is broader than the fixed set of entries it copies and runs without confirmation. This is a destructive-action risk; the source does not show malicious intent.
Static reason
The scanner resource watchdog stopped analysis before complete coverage. This unresolved result requires AI review and must not be published as clean, warn, or block.
Trigger
Starting the Po container server when a legacy ~/.pi/.po directory exists and migration has completed.
Impact
Unlisted user data in ~/.pi/.po may be lost.
Mechanism
The server copies selected entries, then removes the entire legacy directory after a marker check and a scan for older Po processes; no confirmation is requested.
AI rationale
The startup migration intentionally retires the legacy Po directory, but its recursive cleanup is broader than the fixed set of entries it copies and runs without confirmation. This is a destructive-action risk; the source does not show malicious intent.
Evidence
runtime/node_modules/@agimon-ai/po/dist/bin/serve.mjsruntime/node_modules/@agimon-ai/po/dist/src/cli/server/run.mjsruntime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjs~/.pi/.po
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The container descriptor launches Po’s server, whose startup initializes its agent directory and runs the server.
- Migration copies a fixed set of entries from the legacy Po home, plus the plans directory; it does not copy every entry in the legacy home.
- Server startup automatically calls the legacy-home retirement routine.
- Retirement recursively deletes the entire legacy home after migration is marked complete and a process scan finds no older Po host.
- The package manifest declares only a build script, with no install lifecycle script.
Evidence against
- The cleanup is part of an explicitly described migration and is deferred if the host scan fails or detects an older Po process.
Behavioral surface
Source & flagged code
8 flaggedsource
•stage = scanner_worker; reason = analysis_timeout
High
Semantic Analysis Limited
The scanner resource watchdog stopped semantic analysis before full coverage; route this package to AI without publishing a static verdict.
runtime/node_modules/@agimon-ai/po/dist/bin/serve.mjsView file
17await initializeAgentDirectory();
const { runServer } = await import("../src/cli/server/run.mjs");
const stopController = new AbortController();
let stopped;
const server = runServer(process.argv.slice(2), stopController.signal);
installProcessGuards({
write: (me
Medium
Ai Review Evidence
The container descriptor launches Po’s server, whose startup initializes its agent directory and runs the server.
runtime/node_modules/@agimon-ai/po/dist/bin/serve.mjsView on unpkg · L17runtime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjsView file
Findings
1 High7 Medium
HighSemantic Analysis Limited
MediumAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/bin/serve.mjs
MediumAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjs
MediumAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjs
MediumAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/cli/server/run.mjs
MediumAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjs
MediumAi Review Evidenceruntime/node_modules/@agimon-ai/po/dist/src/composition/poHomeMigration/index.mjs
MediumSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @agimon-ai/po-container-runtime-linux-x64@0.0.1-alpha.33.
See all versions of @agimon-ai/po-container-runtime-linux-x64 for other recorded verdicts.
- Review the evidence and your use of @agimon-ai/po-container-runtime-linux-x64@0.0.1-alpha.33 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.