registry / @companion-ai/feynman / 0.5.40
@companion-ai/feynman@0.5.40
The open source AI research agent.
AI Security Review
scanned 23d ago · by lpm-firewall-aiThe preinstall hook only checks the Node version, and project configuration writes occur through an explicit command that preserves existing files. The runtime’s disclosed, opt-out telemetry and signed-in research tools do not establish a concrete attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Installation runs the preinstall Node version check; project scaffolding requires the user to invoke /init.
Impact
The inspected behavior does not establish malicious mutation, credential disclosure, or another confirmed attack surface.
Mechanism
The check validates the Node version, while /init preserves an existing AGENTS.md. The CLI telemetry notice describes collection and an opt-out.
AI rationale
The preinstall hook only checks the Node version, and project configuration writes occur through an explicit command that preserves existing files. The runtime’s disclosed, opt-out telemetry and signed-in research tools do not establish a concrete attack.
Evidence
package.jsonscripts/check-node-version.mjsextensions/research-tools/project.tsbin/feynman.jsdist/cli.jsdist/telemetry/posthog.jsextensions/research-tools/alpha.ts
Network endpoints1
us.i.posthog.com
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs a Node version check at preinstall; the script exits only when the installed Node version is unsupported.
- The /init command writes AGENTS.md only when the user invokes it and the file does not already exist.
- bin/feynman.js checks for Pi dependencies and loads the package CLI; no credential transfer or hidden install action is shown there.
- dist/cli.js initializes telemetry and displays its notice; the notice describes the collected data and an opt-out setting.
- alpha.ts registers account-dependent research tools only when signed in; annotations are local.
- The telemetry notice states that prompts, model output, paper content, and tool arguments are not sent, and provides an opt-out.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetry
Source & flagged code
6 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/feynman.jsView file
23if (compareNodeVersions(parseNodeVersion(process.versions.node), parseNodeVersion(MIN_NODE_VERSION)) < 0) {
L24: const isWindows = process.platform === "win32";
L25: console.error(`feynman requires Node.js ${MIN_NODE_VERSION} or newer (detected ${process.versions.node}).`);
L26: console.error(isWindows
L27: ? "Install a supported Node.js release from https://nodejs.org, or use the standalone installer:"
L28: : `Switch to a supported Node release with \`nvm install ${PREFERRED_NODE_MAJOR} && nvm use ${PREFERRED_NODE_MAJOR}\`, or use the standalone installer:`);
...
L35:
L36: // `--version` needs only package.json; answer it without loading the CLI.
L37: if (process.argv.length === 3 && (process.argv[2] === "--version" || process.argv[2] === "-v")) {
L38: const { readFileSync } = await
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/feynman.jsView on unpkg · L23Findings
4 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltaextensions/research-tools/alpha.ts
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/install/install-skills.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @companion-ai/feynman@0.5.40.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.5.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.