registry / @devilsdev/rag-pipeline-utils / 2.6.1
@devilsdev/rag-pipeline-utils@2.6.1
Please upgrade to 3.2.0 or later
Composable retrieval-augmented generation (RAG) for Node.js: grounded citations, evaluation, guardrails, hybrid retrieval and a CLI.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe flagged dynamic evaluation is part of the plugin sandbox, and connector credentials follow the configured service flow. The postinstall hook runs Husky setup, while the reviewed plugin download path disables package install scripts.
Static reason
One or more suspicious static signals were detected.
Trigger
Users invoke the CLI, configure a RAG connector, or request plugin execution or installation.
Impact
No unauthorized credential transfer, account action, or harmful automatic behavior was identified.
Mechanism
Connectors use configured AI services; plugin code evaluation occurs in the sandbox, and npm plugin retrieval disables install scripts.
AI rationale
The flagged dynamic evaluation is part of the plugin sandbox, and connector credentials follow the configured service flow. The postinstall hook runs Husky setup, while the reviewed plugin download path disables package install scripts.
Network endpoints2
api.anthropic.comregistry.rag-pipeline.dev
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The install hook runs `husky install`; `prepublishOnly` runs project checks and validation.
- The CLI entry runs its command parser when the executable is invoked.
- The OpenAI connector avoids sending `OPENAI_API_KEY` to a custom base URL unless the caller supplies a key explicitly.
- The flagged `eval` reconstructs a plugin-provided function for execution in the plugin sandbox; it is not a concealed payload loader.
- Fetching an npm plugin uses `npm pack --ignore-scripts`.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts registry_only=start
Critical
Manifest Confusion
Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.
package.jsonView on unpkg•scripts.postinstall = husky install
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/index.cjsView file
32var getLogLevel = () => {
L33: if (process.env.LOG_LEVEL) {
L34: const level = process.env.LOG_LEVEL.toLowerCase();
...
L228: if (publicKey instanceof crypto.KeyObject) {
L229: keyObject = publicKey.type === "private" ? crypto.createPublicKey(publicKey) : publicKey;
L230: } else if (Buffer.isBuffer(publicKey) && publicKey.length === 32) {
...
L238: } else if (typeof publicKey === "string" && HEX_KEY_RE.test(publicKey)) {
L239: keyObject = rawToKeyObject(Buffer.from(publicKey, "hex"));
L240: } else if (typeof publicKey === "string" && publicKey.includes("-----BEGIN")) {
...
L263: function computeContentDigest({ files = [], baseDir, contents = {} } = {}) {
L264: const root = path.resolve(baseDir || process.cwd());
L265: const entries = /* @__PURE__ */ new Map();
Findings
1 Critical3 High4 Medium7 Low
CriticalManifest Confusionpackage.json
HighInstall Time Lifecycle Scriptspackage.json
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limitedsrc/cli/commands/plugin-hub/local-commands.js#virtual:normalized:round1
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/index.cjs
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @devilsdev/rag-pipeline-utils@2.6.1.
See all versions of @devilsdev/rag-pipeline-utils for other recorded verdicts.
- Review the evidence and your use of @devilsdev/rag-pipeline-utils@2.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.