registry / @companion-ai/feynman / 0.5.56
@companion-ai/feynman@0.5.56
The open source AI research agent.
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection found a Node-version install guard, user-triggered project setup and AlphaXiv authentication, and package-aligned runtime telemetry. Although failed commands may send up to 4 KB of Pi stderr, the telemetry has an opt-out and does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
The version check runs during npm installation. AlphaXiv login and project scaffolding require an explicit command or setup confirmation.
Impact
No confirmed attack impact was established; the observed telemetry is limited to runtime reporting and can be disabled.
Mechanism
No unrelated credential transfer or unconsented agent-control change was found. Runtime telemetry sends command data and may include bounded Pi stderr after a failed command, with an opt-out notice.
AI rationale
Source inspection found a Node-version install guard, user-triggered project setup and AlphaXiv authentication, and package-aligned runtime telemetry. Although failed commands may send up to 4 KB of Pi stderr, the telemetry has an opt-out and does not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package’s only install hook runs a Node version check; the script compares the installed version with the minimum and exits when it is too old.
- The flagged project-file write belongs to the explicit `/init` command. It creates `AGENTS.md` only when that file is absent and preserves an existing one.
- AlphaXiv login is triggered by an explicit command or setup confirmation and uses the AlphaXiv authentication issuer.
- The inspected dependencies provide prompt UI, AlphaXiv authentication, and XML parsing functionality through their declared entrypoints.
- Runtime telemetry reports command metadata and may include up to 4 KB of Pi stderr after a failed command. The package displays an opt-out notice; no unrelated credential recipient or agent-control mutation was found.
Evidence against
- Telemetry is enabled by default and may send Pi stderr from failed commands to the configured or default PostHog host.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.preinstall = node ./scripts/check-node-version.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgbin/feynman.jsView file
23if (compareNodeVersions(parseNodeVersion(process.versions.node), parseNodeVersion(MIN_NODE_VERSION)) < 0) {
L24: const isWindows = process.platform === "win32";
L25: console.error(`feynman requires Node.js ${MIN_NODE_VERSION} or newer (detected ${process.versions.node}).`);
L26: console.error(isWindows
L27: ? "Install a supported Node.js release from https://nodejs.org, or use the standalone installer:"
L28: : `Switch to a supported Node release with \`nvm install ${PREFERRED_NODE_MAJOR} && nvm use ${PREFERRED_NODE_MAJOR}\`, or use the standalone installer:`);
...
L35:
L36: // `--version` needs only package.json; answer it without loading the CLI.
L37: if (process.argv.length === 3 && (process.argv[2] === "--version" || process.argv[2] === "-v")) {
L38: const { readFileSync } = await
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/feynman.jsView on unpkg · L23Findings
3 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilitybin/feynman.js
HighSemantic Analysis Limiteddist/cli.js#virtual:normalized:round1
MediumDynamic Requirebin/feynman.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/install/install-skills.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @companion-ai/feynman@0.5.56.
See all versions of @companion-ai/feynman for other recorded verdicts.
- Review the evidence and your use of @companion-ai/feynman@0.5.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.