registry / @botbuddy/cli / 1.64.3
@botbuddy/cli@1.64.3
BotBuddy — Swarm coordination CLI for multi-agent workflows
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe inspected behaviors match the package’s CLI purpose: wait credentials go to the configured BotBuddy relay, update checks retrieve package version metadata, and staging-pool persistence requires an explicit human-checked install command. No lifecycle scripts or unrelated credential flows were identified.
Static reason
No blocking static signals were detected.
Trigger
Wait and run-delivery behavior is tied to user-run CLI operations; pool persistence requires the explicit staging-pool install command.
Impact
These behaviors support the package’s stated CLI features; the reviewed source did not show unrelated credential disclosure or unrequested account actions.
Mechanism
The wait command sends its session credential to the configured BotBuddy relay; update checks contact the npm registry; explicit pool installation writes configuration and a launchd job.
AI rationale
The inspected behaviors match the package’s CLI purpose: wait credentials go to the configured BotBuddy relay, update checks retrieve package version metadata, and staging-pool persistence requires an explicit human-checked install command. No lifecycle scripts or unrelated credential flows were identified.
Evidence
~/.botbuddy/update-check.json~/.botbuddy/staging-session-pool/<poolId>/config.json<poolBinding.launchdLabel>.plist
Network endpoints2
api.bot-buddy.ai/functions/v1registry.npmjs.org/@botbuddy/cli/latest
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package manifest defines CLI entry points and no lifecycle scripts.
- The wait command resolves a BotBuddy agent session credential and sends it to the configured relay endpoint.
- The update check fetches only the package’s latest version from the npm registry.
- Staging-pool installation requires an explicit command and a human-only check before network or file operations.
- Run-delivery sends terminal updates using the session token sealed for the run’s owner.
Evidence against
- The package has a command that runs `npm install -g @botbuddy/cli@latest`.
- Explicit staging-pool installation writes configuration and a launchd plist, then registers the job.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedsrc/update-check.mjsView file
16import { readFileSync } from "node:fs";
L17: import { spawn, spawnSync } from "node:child_process";
L18: import { homedir } from "node:os";
High
Child Process
Package source references child process execution.
src/update-check.mjsView on unpkg · L16src/staging-pool/refresh-runtime.mjsView file
26const jobPath = join(app, "job.mjs");
L27: async function owned(path, directory = false, privateFile = false) {
L28: const info = await fs.lstat(path);
...
L42: const before = await configBytes();
L43: const installed = validateInstalledConfig(JSON.parse(before));
L44: const previous = installed.poolBinding;
...
L61: const rows = await fetchRegisteredPools({
L62: exec: (file, args, callOptions) => exec(process.execPath, [file, ...args], callOptions),
L63: botbuddyBin: cliEntry, env, tenant, poolId, preserveAgentContext: true, requireTenantMatch: true,
...
L125: await fs.rename(configTemp, configPath);
L126: return { ok: true, command: "refresh-runtime", tenant, poolId, runtimeVersion: metadata.version, runtimeSha256: contentDigest, personaAliases: Object.keys(next.personas), producer:
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
Findings
4 High5 Medium3 Low
HighChild Processsrc/update-check.mjs
HighSame File Env Network Executionsrc/pw/daemon.mjs
HighTrigger Reachable Persistencesrc/staging-pool/cli.mjs
HighSemantic Analysis Limitedsrc/agent-credential-store.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencesrc/staging-pool/refresh-runtime.mjs
MediumShips Native Binarydaemon/bin/darwin-arm64/botbuddy-daemon
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @botbuddy/cli@1.64.3.
See all versions of @botbuddy/cli for other recorded verdicts.
- Review the evidence and your use of @botbuddy/cli@1.64.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.