registry / @awareness.market/local / 0.14.0
@awareness.market/local@0.14.0
Local-first AI agent memory system. No account needed.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe scanner’s execution and network signals resolve to a dependency-install fallback, a loopback daemon, and explicit product commands. The inspected agent configuration entries are metadata describing project-level targets and managed blocks; they do not establish an install-time mutation or attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The installer runs during postinstall; the daemon starts when invoked through the CLI.
Impact
The inspected behavior does not establish credential disclosure, broad agent configuration changes, or another concrete attack.
Mechanism
The installer checks for its declared Transformers dependency and falls back to installing that dependency if missing. The daemon serves on loopback and writes its configuration within its project directory.
AI rationale
The scanner’s execution and network signals resolve to a dependency-install fallback, a loopback daemon, and explicit product commands. The inspected agent configuration entries are metadata describing project-level targets and managed blocks; they do not establish an install-time mutation or attack.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook runs the Transformers installer.
- The installer exits when the declared Transformers dependency resolves; its fallback installs that dependency using the detected package manager.
- The agent configuration entries describe project-level files and managed blocks with conflict checks.
- The daemon configuration handler writes to its own project configuration directory when handling an API request.
- The daemon binds to the loopback address, and the CLI starts it with output directed to a log file.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install-transformers.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/awareness-local.mjsView file
16L17: import { spawn } from 'node:child_process';
L18: import fs from 'node:fs';
High
Child Process
Package source references child process execution.
bin/awareness-local.mjsView on unpkg · L16bin/cli.cjsView file
3// Wrapper to load the ESM entry point from CommonJS-compatible bin
L4: const { pathToFileURL } = require('node:url');
L5: const { join } = require('node:path');
Findings
1 Critical8 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltasrc/daemon.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/awareness-local.mjs
HighShell
HighSame File Env Network Executionbin/awareness-local.mjs#virtual:normalized:round1
HighCommand Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSandbox Evasion Gated Capabilitysrc/daemon/api-handlers.mjs
HighTrigger Reachable Command Output Exfiltrationbin/awareness-local.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedbin/awareness-local.mjs#virtual:normalized:round1
MediumDynamic Requirebin/cli.cjs
MediumNetwork
Affected versions and remediation
This report applies to @awareness.market/local@0.14.0.
See all versions of @awareness.market/local for other recorded verdicts.
- Review the evidence and your use of @awareness.market/local@0.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.