registry / @botbuddy/cli / 1.63.23
@botbuddy/cli@1.63.23
⚠ Under reviewBotBuddy — Swarm coordination CLI for multi-agent workflows
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe inspected JavaScript did not establish a concrete attack, but the package's shipped daemon binaries remain uncharacterized by supported offline analysis. That unresolved executable behavior prevents a clean verdict.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The daemon installer invokes the bundled binary during installation.
Impact
The binaries' effects remain unknown; no concrete harm was established.
Mechanism
Available offline analysis could not characterize either binary, so its behavior cannot be resolved from this inspection.
AI rationale
The inspected JavaScript did not establish a concrete attack, but the package's shipped daemon binaries remain uncharacterized by supported offline analysis. That unresolved executable behavior prevents a clean verdict.
Evidence
.lpm-inspection-ewU62I/0-91dc67a61e2e.txt.lpm-inspection-ewU62I/1-bffecca81f03.txtdaemon/bin/darwin-arm64/botbuddy-daemondaemon/bin/linux-x64/botbuddy-daemon
Decision evidence
public snapshotAI called this Manual Review at 99.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package exposes command-line entrypoints, and its daemon installer invokes the bundled daemon.
- The offline analysis could not characterize either shipped daemon binary, leaving their behavior unresolved.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedsrc/update-check.mjsView file
15import { mkdir, readFile, writeFile } from "node:fs/promises";
L16: import { spawn, spawnSync } from "node:child_process";
L17: import { homedir } from "node:os";
High
Child Process
Package source references child process execution.
src/update-check.mjsView on unpkg · L15src/staging-pool/refresh-runtime.mjsView file
26const jobPath = join(app, "job.mjs");
L27: async function owned(path, directory = false, privateFile = false) {
L28: const info = await fs.lstat(path);
...
L42: const before = await configBytes();
L43: const installed = validateInstalledConfig(JSON.parse(before));
L44: const previous = installed.poolBinding;
...
L61: const rows = await fetchRegisteredPools({
L62: exec: (file, args, callOptions) => exec(process.execPath, [file, ...args], callOptions),
L63: botbuddyBin: cliEntry, env, tenant, poolId, preserveAgentContext: true, requireTenantMatch: true,
...
L125: await fs.rename(configTemp, configPath);
L126: return { ok: true, command: "refresh-runtime", tenant, poolId, runtimeVersion: metadata.version, runtimeSha256: contentDigest, personaAliases: Object.keys(next.personas), producer:
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
5 High5 Medium3 Low
HighChild Processsrc/update-check.mjs
HighSame File Env Network Executionsrc/pw/daemon.mjs
HighTrigger Reachable Persistencesrc/staging-pool/cli.mjs
HighSemantic Analysis Limitedsrc/agent-credential-store.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/stack.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencesrc/staging-pool/refresh-runtime.mjs
MediumShips Native Binarydaemon/bin/darwin-arm64/botbuddy-daemon
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @botbuddy/cli@1.63.23.
See all versions of @botbuddy/cli for other recorded verdicts.
- Review the evidence and your use of @botbuddy/cli@1.63.23 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.