@devflow-tools/knowledge-engine@0.18.2
Version-aware project knowledge ingestion and retrieval for DevFlow.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe lifecycle hook is package-aligned Playwright browser provisioning, while network, subprocess, and filesystem operations implement explicit documentation ingestion into a project-local knowledge store. Source inspection found no concrete exfiltration, stealth persistence, remote payload execution, or AI-agent control-surface mutation.
Decision evidence
public snapshot- package.json postinstall only runs Playwright Chromium installation.
- Runtime networking is explicit documentation retrieval via fetch, Context7, and GitHub.
- git-fetcher uses fixed git arguments for sparse documentation clones.
- KnowledgeEngine confines writes to the caller-supplied project knowledge directory.
- No env/credential harvesting, eval, dynamic loading, or agent-control config access found.
Source & flagged code
2 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgFindings
Affected versions and remediation
This report applies to @devflow-tools/knowledge-engine@0.18.2.
See all versions of @devflow-tools/knowledge-engine for other recorded verdicts.
- Review the evidence and your use of @devflow-tools/knowledge-engine@0.18.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.