registry / @awareness.market/local / 0.12.4
@awareness.market/local@0.12.4
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 29d ago · by lpm-firewall-aiStatic inspection found a package-aligned, conditional install helper and local daemon behavior; it found no concrete attack or unconsented agent-control mutation. Scanner signals alone do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the CLI or starting the stdio proxy; the browser-opening route requires a request to the local daemon.
Impact
No concrete malicious effect or exfiltration path was established from the inspected source.
Mechanism
The CLI starts the local daemon and opens a localhost page once; the proxy launches that daemon using a validated project path. The API limits browser targets to awareness.market HTTPS URLs.
AI rationale
Static inspection found a package-aligned, conditional install helper and local daemon behavior; it found no concrete attack or unconsented agent-control mutation. Scanner signals alone do not establish malicious behavior.
Evidence
package.jsonawareness-spec.jsonsrc/spec/awareness-spec.jsonbin/awareness-local.mjssrc/mcp-stdio.mjssrc/daemon/api-handlers.mjs
Network endpoints2
localhostawareness.market/
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares the transformer package as a runtime dependency; its postinstall helper is conditional and does not install another release of this package.
- Both awareness specifications describe Claude Code integration paths as configuration data; these entries do not themselves perform writes.
- The CLI’s first-run behavior writes a dashboard flag under the user’s Awareness directory and opens a localhost URL.
- The stdio proxy starts the local daemon with the current Node executable and arguments built for a validated project directory.
- The browser-opening API rejects URLs outside the awareness.market HTTPS prefix.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16src/mcp-stdio.mjsView file
619// Windows it never is: npm installs a `cmd /c` shim, so process.ppid is that
L620: // cmd.exe — and cmd.exe waits on *us*, meaning it can never die first. The
L621: // process that actually goes away is the grandparent (claude.exe), which
Findings
8 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShellsrc/mcp-stdio.mjs
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @awareness.market/local@0.12.4.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.12.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.