registry / @awareness.market/local / 0.12.5
@awareness.market/local@0.12.5
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe lifecycle hook conditionally reinstalls a declared dependency, while networked features are explicit or disabled by default. Source inspection found no concrete malicious chain.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A failed dependency resolution during installation, or an explicit CLI or configured cloud action.
Impact
A failed install may modify dependency state; explicitly enabled cloud features may transmit user-selected memory or listing data.
Mechanism
Conditional dependency repair and opt-in vendor API requests.
AI rationale
The lifecycle hook conditionally reinstalls a declared dependency, while networked features are explicit or disabled by default. Source inspection found no concrete malicious chain.
Evidence
package.jsoninstall-transformers.mjsbin/awareness-local.mjssrc/core/config.mjssrc/core/workspace-scanner.mjssrc/mcp-stdio.mjs.awareness/config.json
Network endpoints1
awareness.market/api/v1
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The postinstall hook can run a nested package-manager install when dependency resolution fails.
- The CLI can send explicitly requested deal listings to the vendor API.
- Cloud sync can transmit memory data only after the user enables it and provides credentials.
Evidence against
- The normal postinstall path exits when the declared transformer dependency resolves.
- Cloud sync is disabled by default and has no API key by default.
- The daemon and MCP proxy communicate over localhost for normal runtime operation.
- Workspace scanning excludes common credential and secret files.
- No source evidence shows credential harvesting, hidden remote payload loading, or AI-agent configuration mutation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16src/mcp-stdio.mjsView file
619// Windows it never is: npm installs a `cmd /c` shim, so process.ppid is that
L620: // cmd.exe — and cmd.exe waits on *us*, meaning it can never die first. The
L621: // process that actually goes away is the grandparent (claude.exe), which
Findings
1 Critical7 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/daemon.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShellsrc/mcp-stdio.mjs
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @awareness.market/local@0.12.5.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.12.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.