registry / @companion-ai/feynman / 0.3.29
@companion-ai/feynman@0.3.29
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource shows user-invoked mutation of a first-party Pi-based agent runtime and runtime package installation. The install hook itself is limited to a version check, so the source does not justify a block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the feynman CLI.
Impact
This creates a guarded first-party agent-extension lifecycle risk because execution changes local agent runtime code and installs extensions at CLI startup.
Mechanism
The launcher imports a runtime patcher; the patcher rewrites selected Pi package files and invokes a package manager for its configured workspace.
AI rationale
Source shows user-invoked mutation of a first-party Pi-based agent runtime and runtime package installation. The install hook itself is limited to a version check, so the source does not justify a block.
Evidence
bin/feynman.jsscripts/patch-embedded-pi.mjsdist/pi/runtime-patches.js
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI imports a script that patches the embedded Pi runtime before starting the application.
- That script invokes a package manager to install configured runtime packages into its workspace.
- The runtime patcher targets bundled and Feynman user-scope Pi node_modules, then rewrites Pi package files.
Evidence against
- The only install lifecycle hook is a Node-version check, not the runtime patcher.
- The patching and package setup are activated by running the CLI; no source evidence shows secret collection or transmission.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/setup/preview.jsView file
1import { spawnSync } from "node:child_process";
L2: import { BREW_FALLBACK_PATHS, PANDOC_FALLBACK_PATHS, resolveExecutable } from "../system/executables.js";
High
Child Process
Package source references child process execution.
dist/setup/preview.jsView on unpkg · L1extensions/research-tools/workbench-connectors.tsView file
361
Findings
1 Critical14 High9 Medium8 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-Dn1dPtCn.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/setup/preview.js
HighShellextensions/research-tools/workbench-connectors.ts
HighSame File Env Network Executionnode_modules/@earendil-works/pi-coding-agent/node_modules/google-auth-library/build/src/auth/googleauth.js#virtual:normalized:round1
HighCommand Output Exfiltrationnode_modules/@earendil-works/pi-coding-agent/examples/extensions/doom-overlay/doom/build/doom.js
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighCloud Metadata Accessnode_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.29.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.