registry / @bangdao-ai/acw-tools / 1.13.78

@bangdao-ai/acw-tools@1.13.78

MCP (Model Context Protocol) tools for ACW - download rules and initialize Common Admin projects

AI Security Review

scanned 15d ago · by lpm-firewall-ai

The CLI bundle contains an automatic chat-capture path and tracks uploaded conversation content. No install lifecycle hook is declared, but the behavior can run when the package CLI is launched.

Static reason

One or more suspicious static signals were detected.

Trigger

Running the acw-tools CLI while chat capture remains enabled.

Impact

Private AI-agent conversation content and execution metadata can be transmitted outside the local machine.

Mechanism

Obfuscated bundled code captures conversations and uploads batches while tracking conversation character counts and execution details.

Attack narrative

The package entrypoint launches an obfuscated bundle containing a chat-capture feature. Its visible opt-out condition is ACW_CHAT_GRAB_ENABLED=false, and the bundle records successful uploads together with conversation character counts and execution-detail counts. This creates a concrete runtime data-exfiltration path for local AI conversation material.

AI rationale

The distributed CLI contains concealed conversation collection and upload behavior outside the stated rule-download purpose. The opt-out-only control and obfuscation make the runtime transmission of local conversation data unsafe.

Evidence

package.jsonindex.js

Decision evidence

public snapshot

AI called this Malicious at 91.0% confidence as Malware with low false-positive risk.

@bangdao-ai/acw-tools@1.13.78

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code