registry / @archymedes/friday / 3.12.0
@archymedes/friday@3.12.0
⚠ Under reviewFriday — a coding agent for your terminal that shows its work, asks before it changes anything, and proves a change works. Any model: ten providers, free models, your Claude subscription or your ChatGPT plan.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe inspected JavaScript does not establish malicious behavior, and the install telemetry carries only version and platform fields with opt-out checks. Manual review is appropriate because relevant optional native binary behavior remains unresolved.
Static reason
One or more suspicious static signals were detected.
Trigger
Launching the CLI on a supported platform can select and run its optional native binary.
Impact
Unknown for the uninspected binaries; no confirmed malicious impact was identified in the reviewed source.
Mechanism
The launcher resolves a platform-specific package and starts its binary; the relevant binary source was not fully available for inspection.
AI rationale
The inspected JavaScript does not establish malicious behavior, and the install telemetry carries only version and platform fields with opt-out checks. Manual review is appropriate because relevant optional native binary behavior remains unresolved.
Evidence
package.jsonbin/launcher.mjsdist/archymedes-main.mjs
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest declares optional platform-specific native binaries, and the launcher selects a package based on the current platform; the behavior of some relevant binary packages was not available in the inspected source.
- The main bundle also resolves an optional platform-specific state binary, leaving another native execution boundary outside this source review.
Evidence against
- The install cue sends only an install or update event, version, operating system, and architecture, and its caller honors telemetry opt-outs.
- The reviewed search code uses configured keys with the corresponding named search provider; these excerpts do not show unrelated credential recipients.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbin/friday.mjsView file
10// before, and asked for the interface it says why there is none and how to get it.
L11: import { spawn } from "node:child_process";
L12: import { existsSync } from "node:fs";
High
16L17: const require = createRequire(import.meta.url);
L18: const agentEntry = path.join(import.meta.dirname, "..", "dist", "friday.mjs");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/friday.mjsView on unpkg · L16dist/archymedes-main.mjsView file
3006"pwsh",
L3007: "powershell",
L3008: "cmd",
High
Findings
9 High4 Medium6 Low
HighChild Processbin/friday.mjs
HighShelldist/archymedes-main.mjs
HighSame File Env Network Executiondist/archymedes-main.mjs
HighCommand Output Exfiltrationdist/archymedes-main.mjs
HighCloud Metadata Accessdist/archymedes-main.mjs
HighRemote Agent Bridgedist/archymedes-main.mjs
HighCross File Remote Execution Contextdist/archymedes-main.mjs
HighBase64 Obscured Urldist/factory-6kd0ywyr.mjs
HighSemantic Analysis Limiteddist/archymedes-main.mjs
MediumDynamic Requirebin/friday.mjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @archymedes/friday@3.12.0.
See all versions of @archymedes/friday for other recorded verdicts.
- Review the evidence and your use of @archymedes/friday@3.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.