@archymedes/friday@3.12.6
Friday — a coding agent for your terminal that shows its work, asks before it changes anything, and proves a change works. Any model: ten providers, free models, your Claude subscription or your ChatGPT plan.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe default startup ping is undisclosed in the package documentation, so it meets the warning-level rule for runtime telemetry. Its payload is limited to an install/update event, version, platform, and architecture, and I found no evidence of malicious collection or install-hook contact.
Static reason
One or more suspicious static signals were detected.
Trigger
Running a normal CLI command when no marker exists or the stored version differs; ARCHYMEDES_TELEMETRY, DO_NOT_TRACK, CI, or NODE_ENV=test can suppress it.
Impact
The service can count installs and updates and learn the CLI version and platform. No project data or credentials are included in this cue.
Mechanism
Sends an install/update event, CLI version, OS platform, and architecture to the package service, then stores the version marker.
AI rationale
The default startup ping is undisclosed in the package documentation, so it meets the warning-level rule for runtime telemetry. Its payload is limited to an install/update event, version, platform, and architecture, and I found no evidence of malicious collection or install-hook contact.
Evidence
dist/archymedes-main.mjssettingsDirectory(environment)/installed.json
Network endpoints1
archymedes.xyz/api/v1/count/
Decision evidence
public snapshotAI called this Suspicious at 95.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Ordinary CLI startup calls sendInstallCue without waiting for a user telemetry choice.
- The cue contains only an install/update event, CLI version, OS platform, and architecture.
- The cue is POSTed to https://archymedes.xyz/api/v1/count/ by default; code provides environment-variable opt-outs.
- The only declared lifecycle script is prepublishOnly, which runs the build.
Evidence against
- The telemetry does not include project data, credentials, hostnames, or command output.
- The cue is sent only when the stored version differs, so it is limited to an initial run or version update.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbin/friday.mjsView file
10// before, and asked for the interface it says why there is none and how to get it.
L11: import { spawn } from "node:child_process";
L12: import { existsSync } from "node:fs";
High
16L17: const require = createRequire(import.meta.url);
L18: const agentEntry = path.join(import.meta.dirname, "..", "dist", "friday.mjs");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/friday.mjsView on unpkg · L16dist/archymedes-main.mjsView file
3006"pwsh",
L3007: "powershell",
L3008: "cmd",
High
Findings
9 High4 Medium6 Low
HighChild Processbin/friday.mjs
HighShelldist/archymedes-main.mjs
HighSame File Env Network Executiondist/archymedes-main.mjs
HighCommand Output Exfiltrationdist/archymedes-main.mjs
HighCloud Metadata Accessdist/archymedes-main.mjs
HighRemote Agent Bridgedist/archymedes-main.mjs
HighCross File Remote Execution Contextdist/archymedes-main.mjs
HighBase64 Obscured Urldist/factory-6kd0ywyr.mjs
HighSemantic Analysis Limiteddist/archymedes-main.mjs
MediumDynamic Requirebin/friday.mjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @archymedes/friday@3.12.6.
See all versions of @archymedes/friday for other recorded verdicts.
- Review the evidence and your use of @archymedes/friday@3.12.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.