registry / @companion-ai/feynman / 0.3.14
@companion-ai/feynman@0.3.14
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe preinstall hook is only a Node-version gate, so no unconsented install-time foreign agent-control mutation was found. The user-invoked CLI performs broad but package-aligned Pi runtime/extension setup, which warrants a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs the feynman CLI.
Impact
Modifies bundled/local Pi runtime files and Feynman-owned workspace; may install Pandoc on global macOS use.
Mechanism
runtime dependency and agent-extension patching
AI rationale
The preinstall hook is only a Node-version gate, so no unconsented install-time foreign agent-control mutation was found. The user-invoked CLI performs broad but package-aligned Pi runtime/extension setup, which warrants a warning rather than a block.
Evidence
package.jsonscripts/check-node-version.mjsbin/feynman.jsscripts/patch-embedded-pi.mjsscripts/lib/runtime-workspace-integrity.mjsscripts/lib/pi-extension-loader-patch.mjs.feynman/runtime-workspace.tgz.feynman/settings.json
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- bin/feynman.js imports patch-embedded-pi on every CLI launch.
- scripts/patch-embedded-pi.mjs rewrites Pi runtime/extension files and sets up .feynman/npm.
- Global macOS CLI launch may run brew install pandoc.
Evidence against
- package.json preinstall only checks Node version and has no network or file mutation.
- Runtime archive SHA-256 matches .feynman/runtime-workspace.sha256.
- Archive is a declared bundled npm workspace; no source evidence of hidden payload execution.
- Network code is research/OAuth/telemetry functionality reached at runtime, not install-time exfiltration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedProtestware
Source & flagged code
14 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/workbench-web/assets/3Dmol-D4OPhBxL.jsView file
1692`+p[g],g++;n.push(e)}else n.push(p[g]);else n.push(r.trim());g++}else if(p[g].substring(0,5)===`loop_`){g++;let t=[];for(;p[g]===``||p[g][0]===`_`;){if(p[g]!==``){let n=p[g].split(...
L1693: `);continue}else break}return n}},"./src/parsers/PDB.ts"(e,t,n){n.r(t),n.d(t,{PDB:()=>i});var r=n(`./src/parsers/utils/getSinglePDB.ts`);function i(e,t){t||={};var n=[],i={};n.mode...
Low
Eval
Package source references a known benign dynamic code generation pattern.
dist/workbench-web/assets/3Dmol-D4OPhBxL.jsView on unpkg · L1692bin/feynman.jsView file
Findings
1 Critical6 High9 Medium8 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-Dn1dPtCn.js
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
HighPayload In Excluded Dir.feynman/runtime-workspace.tgz
HighSemantic Analysis Limiteddist/workbench-web/assets/dist-7ytHgirA.js
HighPrevious Version Dangerous Deltascripts/prepare-runtime-workspace.mjs
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/workbench-web/assets/RDKit_minimal-tnscgqxm.wasm
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.14.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.14 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.