registry / @archymedes/friday / 3.12.2
@archymedes/friday@3.12.2
⚠ Under reviewFriday — a coding agent for your terminal that shows its work, asks before it changes anything, and proves a change works. Any model: ten providers, free models, your Claude subscription or your ChatGPT plan.
AI Security Review
scanned 7d ago · by lpm-firewall-aiNo install-time attack or suspicious credential transfer was established in inspected source. Required optional dependency sources remain unresolved, so the full dependency behavior cannot be cleared.
Static reason
One or more suspicious static signals were detected.
Trigger
Installing or running the package may select platform-specific optional dependencies.
Impact
The unresolved dependency behavior cannot be assessed from this source review.
Mechanism
The manifest declares optional platform state packages whose source was unavailable in the inspected snapshot.
AI rationale
No install-time attack or suspicious credential transfer was established in inspected source. Required optional dependency sources remain unresolved, so the full dependency behavior cannot be cleared.
Evidence
package.json.lpm-dependency-evidence-14d4a314-8e1d-466b-9e22-3d5c0f9ac8e9/0/npm-linux/package.json.lpm-dependency-evidence-14d4a314-8e1d-466b-9e22-3d5c0f9ac8e9/1/npm-linux/package.json.lpm-dependency-evidence-14d4a314-8e1d-466b-9e22-3d5c0f9ac8e9/2/npm-linux/package.json
Decision evidence
public snapshotAI called this Manual Review at 88.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json lists platform-specific optional dependencies; the three inspected interface manifests contain no lifecycle scripts.
- The CLI launches the local agent or a platform interface when the command is run.
- Web-search credentials are read from configured environment variables for provider integrations.
Evidence against
- The package manifest has no install hook; its prepublishOnly script runs a build command.
- The unresolved optional state packages prevent clearing all selected dependency source.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbin/friday.mjsView file
10// before, and asked for the interface it says why there is none and how to get it.
L11: import { spawn } from "node:child_process";
L12: import { existsSync } from "node:fs";
High
16L17: const require = createRequire(import.meta.url);
L18: const agentEntry = path.join(import.meta.dirname, "..", "dist", "friday.mjs");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/friday.mjsView on unpkg · L16dist/archymedes-main.mjsView file
3006"pwsh",
L3007: "powershell",
L3008: "cmd",
High
Findings
9 High4 Medium6 Low
HighChild Processbin/friday.mjs
HighShelldist/archymedes-main.mjs
HighSame File Env Network Executiondist/archymedes-main.mjs
HighCommand Output Exfiltrationdist/archymedes-main.mjs
HighCloud Metadata Accessdist/archymedes-main.mjs
HighRemote Agent Bridgedist/archymedes-main.mjs
HighCross File Remote Execution Contextdist/archymedes-main.mjs
HighBase64 Obscured Urldist/factory-6kd0ywyr.mjs
HighSemantic Analysis Limiteddist/archymedes-main.mjs
MediumDynamic Requirebin/friday.mjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @archymedes/friday@3.12.2.
See all versions of @archymedes/friday for other recorded verdicts.
- Review the evidence and your use of @archymedes/friday@3.12.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.