@archymedes/friday@3.12.8
Friday — a coding agent for your terminal that shows its work, asks before it changes anything, and proves a change works. Any model: ten providers, free models, your Claude subscription or your ChatGPT plan.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package performs undisclosed runtime telemetry on startup, although the payload is limited to ordinary package and platform fields and includes opt-out controls. This warrants a warning, not a publish block.
Static reason
One or more suspicious static signals were detected.
Trigger
CLI startup when the local marker does not contain the current version; suppressed by telemetry opt-out settings, CI, or test mode.
Impact
Reports package and platform usage for counting; no credential or file collection was identified.
Mechanism
POSTs an install/update event with version, OS and architecture to the package vendor’s count endpoint, then records the version marker.
AI rationale
The package performs undisclosed runtime telemetry on startup, although the payload is limited to ordinary package and platform fields and includes opt-out controls. This warrants a warning, not a publish block.
Evidence
dist/archymedes-main.mjssettingsDirectory(environment)/installed.json
Network endpoints1
archymedes.xyz/api/v1/count/
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI startup invokes sendInstallCue automatically, without a user command specific to telemetry.
- The cue reports only install/update status, package version, operating system and architecture.
- The cue is POSTed to the package vendor’s count endpoint by default; opt-out settings are supported, but the README does not disclose this telemetry.
Evidence against
- The launcher starts the documented Friday CLI agent or its platform binary; no install hook runs on registry installation.
- The cloud-metadata lead is part of a web-fetch guard that blocks private and local addresses by default.
- Provider keys are pushed to the Friday account only through the explicit `friday keys push` command.
- The telemetry payload contains no credentials, file contents, hostnames or usernames.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
10 flaggedbin/friday.mjsView file
10// before, and asked for the interface it says why there is none and how to get it.
L11: import { spawn } from "node:child_process";
L12: import { existsSync } from "node:fs";
High
16L17: const require = createRequire(import.meta.url);
L18: const agentEntry = path.join(import.meta.dirname, "..", "dist", "friday.mjs");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/friday.mjsView on unpkg · L16dist/archymedes-main.mjsView file
3006"pwsh",
L3007: "powershell",
L3008: "cmd",
High
Findings
9 High4 Medium6 Low
HighChild Processbin/friday.mjs
HighShelldist/archymedes-main.mjs
HighSame File Env Network Executiondist/archymedes-main.mjs
HighCommand Output Exfiltrationdist/archymedes-main.mjs
HighCloud Metadata Accessdist/archymedes-main.mjs
HighRemote Agent Bridgedist/archymedes-main.mjs
HighCross File Remote Execution Contextdist/archymedes-main.mjs
HighBase64 Obscured Urldist/factory-6kd0ywyr.mjs
HighSemantic Analysis Limiteddist/archymedes-main.mjs
MediumDynamic Requirebin/friday.mjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @archymedes/friday@3.12.8.
See all versions of @archymedes/friday for other recorded verdicts.
- Review the evidence and your use of @archymedes/friday@3.12.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.