registry / @botbuddy/cli / 1.64.11
@botbuddy/cli@1.64.11
BotBuddy — Swarm coordination CLI for multi-agent workflows
AI Security Review
scanned 4h ago · by lpm-firewall-aiThe flagged network, process, and persistence behavior is tied to the CLI’s relay, Playwright, update, and staging-pool features. No automatic install hook, unrelated credential transfer, or unrequested account action was found.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands use the relay and update check; staging-pool and daemon installation require explicit commands.
Impact
These actions match the package’s CLI, coordination, and maintenance features; no unrelated credential collection or automatic persistence was identified.
Mechanism
Wait requests send a session token to the BotBuddy relay, setup-error reports contain diagnostic fields, and the update check queries npm for the package version. The staging-pool install command writes its service configuration and launch plist.
AI rationale
The flagged network, process, and persistence behavior is tied to the CLI’s relay, Playwright, update, and staging-pool features. No automatic install hook, unrelated credential transfer, or unrequested account action was found.
Evidence
~/.botbuddy/update-check.json
Network endpoints3
api.bot-buddy.ai/functions/v1/event-streamapi.bot-buddy.ai/functions/v1/sensor-ingestregistry.npmjs.org/@botbuddy/cli/latest
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The complete manifest defines CLI binaries and library entrypoints, with no lifecycle scripts.
- `bb wait` uses the BotBuddy relay by default (or an explicitly configured relay) and sends its session token to that relay’s event-stream endpoint.
- On wait setup errors, the package sends limited diagnostic fields to the relay’s sensor-ingest endpoint using the service bearer.
- The update check requests the latest package version from `registry.npmjs.org`.
- Staging-pool persistence is created by an explicit, human-only `install` command that requires a tenant.
Evidence against
- The source uses network access, environment variables, and child processes, but the inspected uses serve CLI, relay, Playwright, and update features.
- Native daemon binaries are present and their binary views are unsupported; the inspected source ties daemon setup to explicit CLI commands.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
Source & flagged code
6 flaggedsrc/update-check.mjsView file
16import { readFileSync } from "node:fs";
L17: import { spawn, spawnSync } from "node:child_process";
L18: import { homedir } from "node:os";
High
Child Process
Package source references child process execution.
src/update-check.mjsView on unpkg · L16src/staging-pool/refresh-runtime.mjsView file
26const jobPath = join(app, "job.mjs");
L27: async function owned(path, directory = false, privateFile = false) {
L28: const info = await fs.lstat(path);
...
L42: const before = await configBytes();
L43: const installed = validateInstalledConfig(JSON.parse(before));
L44: const previous = installed.poolBinding;
...
L61: const rows = await fetchRegisteredPools({
L62: exec: (file, args, callOptions) => exec(process.execPath, [file, ...args], callOptions),
L63: botbuddyBin: cliEntry, env, tenant, poolId, preserveAgentContext: true, requireTenantMatch: true,
...
L125: await fs.rename(configTemp, configPath);
L126: return { ok: true, command: "refresh-runtime", tenant, poolId, runtimeVersion: metadata.version, runtimeSha256: contentDigest, personaAliases: Object.keys(next.personas), producer:
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
4 High5 Medium3 Low
HighChild Processsrc/update-check.mjs
HighSame File Env Network Executionsrc/pw/daemon.mjs
HighTrigger Reachable Persistencesrc/staging-pool/cli.mjs
HighPrevious Version Dangerous Deltasrc/stack.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencesrc/staging-pool/refresh-runtime.mjs
MediumShips Native Binarydaemon/bin/darwin-arm64/botbuddy-daemon
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @botbuddy/cli@1.64.11.
See all versions of @botbuddy/cli for other recorded verdicts.
- Review the evidence and your use of @botbuddy/cli@1.64.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.