registry / @companion-ai/feynman / 0.5.1
@companion-ai/feynman@0.5.1
Research-first CLI agent built on Pi and alphaXiv
AI Security Review
scanned 26d ago · by lpm-firewall-aiInspected source shows a Node-version-only preinstall hook, user-invoked project initialization, and a fixed-service Hugging Face credential destination. Scanner signals do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation triggers the Node version check; project file creation requires invoking the init command.
Impact
No malicious impact was identified in the inspected behavior.
Mechanism
The init command creates missing project documentation and session-log directories. Hugging Face credentials are attached only to requests to the fixed Hugging Face API.
AI rationale
Inspected source shows a Node-version-only preinstall hook, user-invoked project initialization, and a fixed-service Hugging Face credential destination. Scanner signals do not establish malicious behavior.
Evidence
AGENTS.mdnotes/session-logs/README.md
Network endpoints1
huggingface.co/api
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The only install hook is a Node version check; package metadata has no runtime self-dependency.
- The project init command runs only when explicitly invoked and creates AGENTS.md and session-log folders under the project cwd, preserving an existing AGENTS.md.
- The launcher checks the Node version before importing the CLI.
- The Hugging Face tool sends optional Hugging Face tokens to its fixed Hugging Face API endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/feynman.jsView file
25if (compareNodeVersions(parsedNodeVersion, parseNodeVersion(MIN_NODE_VERSION)) < 0 || parsedNodeVersion.major > MAX_NODE_MAJOR) {
L26: const isWindows = process.platform === "win32";
L27: console.error(`feynman supports Node.js ${MIN_NODE_VERSION} through ${MAX_NODE_MAJOR}.x (detected ${process.versions.node}).`);
...
L30: : isWindows
L31: ? "Install a supported Node.js release from https://nodejs.org, or use the standalone installer:"
L32: : `Switch to a supported Node release with \`nvm install ${PREFERRED_NODE_MAJOR} && nvm use ${PREFERRED_NODE_MAJOR}\`, or use the standalone installer:`);
...
L39:
L40: // `--version` needs only package.json; answer it without loading the CLI.
L41: if (process.argv.length === 3 && process.argv[2] === "--version") {
L42: const { readFileSync } = aw
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/feynman.jsView on unpkg · L25Findings
3 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/install/install-skills.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @companion-ai/feynman@0.5.1.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.5.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.