registry / @antigma/ante-remote-host / 0.4.0

@antigma/ante-remote-host@0.4.0

Local host daemon for Ante Remote (Ante, Codex, Claude Code, Grok).

AI Security Review

scanned 20h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs the ante-remote-host CLI and connects or configures a relay.

Impact

A compromised or untrusted paired relay could prompt local agent runtimes; explicit dangerous modes can broaden their permissions.

Mechanism

WebSocket relay dispatches browser commands into spawned local AI-agent sessions.

Rationale

No concrete malicious behavior was found. The package nevertheless creates a remote-control path into local AI-agent CLIs, so it warrants a warning as a dangerous dual-use capability.

Evidence

package.jsondist/index.jsdist/config.jsdist/remoteHost.jsdist/runtime/codexRuntime.jsdist/runtime/acpRuntime.js~/.ante-remote/hosts.json~/.ante/settings.json

Network endpoints2

ws://127.0.0.1:8787/ws/host/<machineId>127.0.0.1:8787/api/device-code

@antigma/ante-remote-host@0.4.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code