registry / @botbuddy/cli / 1.64.12
@botbuddy/cli@1.64.12
BotBuddy — Swarm coordination CLI for multi-agent workflows
AI Security Review
scanned 3h ago · by lpm-firewall-aiThe flagged process execution belongs to the explicit package update command, and staging persistence is created by a human-only install command. Credentialed network calls serve the wait and staging-session features and use their configured service destinations.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User-invoked CLI commands; staging pool persistence is set up by the explicit install command.
Impact
These flows perform the requested coordination, staging-session, and update functions; no unrelated collection or account action was found.
Mechanism
Wait operations contact the configured BotBuddy relay, staging sign-in uses the configured HTTPS Supabase target, and the update command invokes npm for this package.
AI rationale
The flagged process execution belongs to the explicit package update command, and staging persistence is created by a human-only install command. Credentialed network calls serve the wait and staging-session features and use their configured service destinations.
Evidence
~/.botbuddy/update-check.json~/.botbuddy/staging-session-pool/<pool_id>/LaunchAgent plist path derived from the configured pool
Network endpoints3
api.bot-buddy.ai/functions/v1/event-streamregistry.npmjs.org/@botbuddy/cli/latesttenant-configured Supabase URL at /auth/v1/token
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a command-line workflow tool and exposes CLI binaries and package exports.
- The staging pool writes and starts a launch agent only through its human-only install command.
- Wait requests send a session token to the BotBuddy relay, whose default URL is api.bot-buddy.ai; the relay URL can be configured by the caller.
- The staging sign-in adapter sends password grants to the configured Supabase URL, which the target policy requires to use HTTPS.
- The child process update behavior runs `npm install -g @botbuddy/cli@latest` through the explicit update command.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedsrc/update-check.mjsView file
16import { readFileSync } from "node:fs";
L17: import { spawn, spawnSync } from "node:child_process";
L18: import { homedir } from "node:os";
High
Child Process
Package source references child process execution.
src/update-check.mjsView on unpkg · L16src/staging-pool/refresh-runtime.mjsView file
26const jobPath = join(app, "job.mjs");
L27: async function owned(path, directory = false, privateFile = false) {
L28: const info = await fs.lstat(path);
...
L42: const before = await configBytes();
L43: const installed = validateInstalledConfig(JSON.parse(before));
L44: const previous = installed.poolBinding;
...
L61: const rows = await fetchRegisteredPools({
L62: exec: (file, args, callOptions) => exec(process.execPath, [file, ...args], callOptions),
L63: botbuddyBin: cliEntry, env, tenant, poolId, preserveAgentContext: true, requireTenantMatch: true,
...
L125: await fs.rename(configTemp, configPath);
L126: return { ok: true, command: "refresh-runtime", tenant, poolId, runtimeVersion: metadata.version, runtimeSha256: contentDigest, personaAliases: Object.keys(next.personas), producer:
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
4 High5 Medium3 Low
HighChild Processsrc/update-check.mjs
HighSame File Env Network Executionsrc/pw/daemon.mjs
HighTrigger Reachable Persistencesrc/staging-pool/cli.mjs
HighPrevious Version Dangerous Deltasrc/staging-pool/cli.mjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencesrc/staging-pool/refresh-runtime.mjs
MediumShips Native Binarydaemon/bin/darwin-arm64/botbuddy-daemon
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @botbuddy/cli@1.64.12.
See all versions of @botbuddy/cli for other recorded verdicts.
- Review the evidence and your use of @botbuddy/cli@1.64.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.