registry / @archymedes/friday / 3.10.0
@archymedes/friday@3.10.0
⚠ Under reviewFriday CLI — a coding agent that shows its work. Runs against your working tree or an isolated remote sandbox, with guarded approvals, git checkpoints, and exact, measured cost accounting.
AI Security Review
scanned 10d ago · by lpm-firewall-aiThe reviewed launcher and telemetry behavior did not establish an attack. Optional state-helper packages are selected at runtime, but their source was unavailable in the prepared dependency review, so this requires manual review.
Static reason
One or more suspicious static signals were detected.
Trigger
Normal CLI startup may select and launch the optional state helper for the current platform.
Impact
The helper’s behavior remains unknown, so a clean verdict is not supported by this review.
Mechanism
The package maps the platform to an optional helper package, resolves its binary, and connects to it; its behavior could not be assessed from available source.
AI rationale
The reviewed launcher and telemetry behavior did not establish an attack. Optional state-helper packages are selected at runtime, but their source was unavailable in the prepared dependency review, so this requires manual review.
Evidence
package.jsondist/archymedes-main.mjs
Network endpoints1
archymedes.xyz/api/v1/count/
Decision evidence
public snapshotAI called this Manual Review at 75.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest lists the state-helper packages as optional dependencies at version 0.4.0.
- Runtime source selects a state-helper package for the current platform and passes the resolved binary to the state client; the prepared review could not obtain source for those selected packages.
- The first-run/update counter sends only version and platform details to the package’s endpoint during normal CLI startup, with telemetry and Do Not Track opt-outs.
- The package’s only lifecycle script is prepublishOnly, which runs its build command.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbin/friday.mjsView file
10// before, and asked for the interface it says why there is none and how to get it.
L11: import { spawn } from "node:child_process";
L12: import { existsSync } from "node:fs";
High
16L17: const require = createRequire(import.meta.url);
L18: const agentEntry = path.join(import.meta.dirname, "..", "dist", "friday.mjs");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/friday.mjsView on unpkg · L16dist/archymedes-main.mjsView file
3006"pwsh",
L3007: "powershell",
L3008: "cmd",
High
Findings
9 High4 Medium6 Low
HighChild Processbin/friday.mjs
HighShelldist/archymedes-main.mjs
HighSame File Env Network Executiondist/archymedes-main.mjs
HighCommand Output Exfiltrationdist/archymedes-main.mjs
HighCloud Metadata Accessdist/archymedes-main.mjs
HighRemote Agent Bridgedist/archymedes-main.mjs
HighCross File Remote Execution Contextdist/archymedes-main.mjs
HighBase64 Obscured Urldist/factory-xdn1az29.mjs
HighSemantic Analysis Limiteddist/archymedes-main.mjs
MediumDynamic Requirebin/friday.mjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @archymedes/friday@3.10.0.
See all versions of @archymedes/friday for other recorded verdicts.
- Review the evidence and your use of @archymedes/friday@3.10.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.