registry / @companion-ai/feynman / 0.3.6
@companion-ai/feynman@0.3.6
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe preinstall hook is only a Node-version gate, so the scanner's install-time malicious finding is unsupported. The explicit CLI bootstrap materially modifies an agent runtime and merits a lifecycle warning under policy.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Explicit execution of the feynman CLI
Impact
Modifies its managed runtime and may install declared dependencies; global macOS use may install pandoc.
Mechanism
first-party agent runtime bootstrap and patching
AI rationale
The preinstall hook is only a Node-version gate, so the scanner's install-time malicious finding is unsupported. The explicit CLI bootstrap materially modifies an agent runtime and merits a lifecycle warning under policy.
Evidence
package.jsonbin/feynman.jsscripts/check-node-version.mjsscripts/patch-embedded-pi.mjs.feynman/settings.json.feynman/runtime-workspace.tgz
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- CLI launcher imports runtime patcher before app startup.
- Patcher extracts and modifies a Feynman-managed Pi runtime.
- Patcher can install bundled runtime dependencies and, on global macOS installs, runs brew install pandoc.
- Bundled runtime archive carries agent-extension packages.
Evidence against
- preinstall only checks supported Node version.
- No install-time network, credential harvesting, or agent-config mutation found.
- Archive has SHA-256 verification and a declared runtime manifest.
- Networked research tools are explicit runtime capabilities; API keys are redacted in OpenAlex output.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedProtestware
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/feynman.jsView file
25if (compareNodeVersions(parsedNodeVersion, parseNodeVersion(MIN_NODE_VERSION)) < 0 || parsedNodeVersion.major > MAX_NODE_MAJOR) {
L26: const isWindows = process.platform === "win32";
L27: console.error(`feynman supports Node.js ${MIN_NODE_VERSION} through ${MAX_NODE_MAJOR}.x (detected ${process.versions.node}).`);
...
L30: : isWindows
L31: ? "Install a supported Node.js release from https://nodejs.org, or use the standalone installer:"
L32: : `Switch to a supported Node release with \`nvm install ${PREFERRED_NODE_MAJOR} && nvm use ${PREFERRED_NODE_MAJOR}\`, or use the standalone installer:`);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/feynman.jsView on unpkg · L25Findings
1 Critical4 High9 Medium8 Low
CriticalTrojan Source Unicodedist/workbench-web/assets/index-BWpU8jFE.js
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighShips High Entropy Blob.feynman/runtime-workspace.tgz
HighPayload In Excluded Dir.feynman/runtime-workspace.tgz
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Wasm Moduledist/workbench-web/assets/RDKit_minimal-tnscgqxm.wasm
MediumShips Build Helperscripts/install/install-skills.sh
MediumShips Compressed Blob.feynman/runtime-workspace.tgz
Affected versions and remediation
This report applies to @companion-ai/feynman@0.3.6.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.3.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.