registry / @cakagus/codeclaw / 1.2.1
@cakagus/codeclaw@1.2.1
AI agent terminal + Telegram bot untuk coding, trading, dan research — dengan skill system auto-upgrade.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe reviewed findings resolve to ordinary CodeClaw functionality: configured API keys are used for market research and Telegram delivery, and the flagged script does not execute its main routine on import. The package manifest has no lifecycle hooks, and doctor fixes are opt-in.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs the relevant command or starts the Telegram bot; importing the gold analysis module does not run its main routine.
Impact
Expected feature behavior; no unrelated credential transfer or unauthorized account action was identified.
Mechanism
The gold analysis reads configured service keys, fetches market and news data, and can send the generated report to the configured Telegram chat.
AI rationale
The reviewed findings resolve to ordinary CodeClaw functionality: configured API keys are used for market research and Telegram delivery, and the flagged script does not execute its main routine on import. The package manifest has no lifecycle hooks, and doctor fixes are opt-in.
Evidence
gold.log
Network endpoints3
api.exa.ainfs.faireconomy.mediaapi.telegram.org
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares no install, preinstall, or postinstall hook; its scripts are user-invoked commands.
- The gold analysis script reads API keys and Telegram settings from config.json, then uses them for the corresponding data and messaging features.
- The gold analysis script runs its main routine only when invoked directly, not when imported.
- Telegram notifications require a configured bot token and chat ID.
Evidence against
- The package includes network access, credential handling, and filesystem writes, but the reviewed flows serve the advertised research and Telegram features.
- The doctor command’s fixes are selected through the explicit --fix option.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
6 flaggedbin/codeclaw.jsView file
17if (cmd === "doctor") {
L18: const { runDoctor, printDoctorReport } = await import(path.join(PKG_ROOT, "lib", "doctor.js"));
L19: const fix = argv.includes("--fix");
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/codeclaw.jsView on unpkg · L17lib/doctor.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @cakagus/codeclaw@1.1.1
matchedIdentity = npm:QGNha2FndXMvY29kZWNsYXc:1.1.1
similarity = 0.978
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/doctor.jsView on unpkg2import path from "node:path";
L3: import { execSync } from "node:child_process";
L4: import { CONFIG_FILE, SKILLS_DIR, SKILLS_INDEX, IS_LEGACY } from "./paths.js";
...
L7: try {
L8: return { ok: true, out: execSync(cmd, { encoding: "utf8", stdio: "pipe", timeout: 10000, shell: "/bin/bash" }).trim() };
L9: } catch (e) {
L10: return { ok: false, out: (e.stdout || "").toString().trim(), err: (e.stderr || e.message || "").toString().trim() };
L11: }
...
L13:
L14: async function tryFetch(url, opts = {}) {
L15: try {
...
L23: function isTermux() {
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
lib/doctor.jsView on unpkg · L2scripts/gold-analysis.mjs#virtual:normalized:round1View file
55try {
L56: const res = await fetch("https://nfs.faireconomy.media/ff_calendar_thisweek.json", {
L57: signal: AbortSignal.timeout(10000),
...
L59: if (!res.ok) return null;
L60: const data = await res.json();
L61: const today = new Date().toISOString().slice(0, 10);
...
L230: if (data?.status === "error" || data?.code) {
L231: throw new Error(`Twelve Data: ${data.message || `code ${data.code}`}`);
L232: }
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
scripts/gold-analysis.mjs#virtual:normalized:round1View on unpkg · L55bin/tokenobral-deploy.shView file
•path = bin/tokenobral-deploy.sh
kind = build_helper
sizeBytes = 893
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
bin/tokenobral-deploy.shView on unpkglib/research.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 3
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
lib/research.js#virtual:normalized:round1View on unpkgFindings
1 Critical2 High6 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationscripts/gold-analysis.mjs#virtual:normalized:round1
HighSemantic Analysis Limitedlib/research.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltalib/doctor.js
MediumDynamic Requirebin/codeclaw.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencelib/doctor.js
MediumShips Build Helperbin/tokenobral-deploy.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @cakagus/codeclaw@1.2.1.
See all versions of @cakagus/codeclaw for other recorded verdicts.
- Review the evidence and your use of @cakagus/codeclaw@1.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.