registry / @frumu/tandem-panel / 0.6.5

@frumu/tandem-panel@0.6.5

Web control center for Tandem authority-layer runtime: agents, workflows, memory, approvals, channels, and ops

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No confirmed malicious attack surface from static source inspection. The package is a Tandem control-panel CLI/server with user-invoked setup, local service management, and configured product API proxies.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs tandem-control-panel/tandem-setup commands or starts the panel server

Impact

Creates Tandem config/state files and optional Tandem system services when explicitly requested; no unconsented install-time execution or exfiltration found

Mechanism

package-aligned control panel setup and runtime proxying

Rationale

Scanner hits map to expected control-panel behavior: child processes, local HTTP server/proxies, env/config files, and optional OS services are user-invoked and package-aligned. I found no lifecycle-triggered persistence, credential harvesting, exfiltration, remote code loading, or foreign AI-agent control-surface mutation.

Evidence

package.jsonbin/cli.jsbin/setup.jsbin/init-env.jsbin/service-runner.jslib/setup/env.jslib/setup/paths.jslib/setup/services/systemd.jslib/setup/services/launchd.jssrc/generated/agent-catalog.json

Network endpoints3

127.0.0.1:39731search.tandem.acapi.githubcopilot.com/mcp/

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no install/postinstall hook; only prepublishOnly build is publisher-side
bin/cli.js only runs user-invoked init/run/doctor/service commands
lib/setup/env.js writes package-owned Tandem config/state under XDG/AppData/.tandem paths
lib/setup/services/systemd.js and launchd.js install Tandem services only via explicit service/init command and require root
bin/setup.js network use proxies configured/local Tandem engine, ACA, KB, and https://search.tandem.ac endpoints
No writes to foreign AI-agent surfaces such as CLAUDE.md, .mcp.json, Codex/Cursor settings, or shell startup files found

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 76 file(s), 3.21 MB of source, external domains: 127.0.0.1, aistudio.google.com, api.githubcopilot.com, api.minimax.io, api.together.xyz, chatgpt.com, console.anthropic.com, console.aws.amazon.com, console.cloud.google.com, console.groq.com, console.mistral.ai, dashboard.cohere.com, docs.github.com, example.com, git-scm.com, github.com, json-schema.org, openrouter.ai, platform.openai.com, portal.azure.com, search.tandem.ac, www.apple.com, www.w3.org

Source & flagged code

5 flagged

dist/assets/index-D2jasLWI.jsView file

Lines 1-4javascript

1const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/DashboardPage-1eXgNhEo.js","assets/fullcalendar-iGCACCSG.js","assets/rolldown-runtime-D3qAFmwF.js","assets/react-query-BJfK33I7.js","assets/motion-Ds6L55S6.js","assets/LazyJson-Btp_vDf6.js","assets/format-DUXW-32X.js","assets/ChatPage-DEIb1zwt.js","assets/chatPageHelpers-D8ycEHRl.js","assets/explorerHandoff-BFiiH4_t.js","assets/sse-D1MZda4k.js","assets/ChatInterfacePanel-BRQWZgc_.js","assets/messages-CtX_ppoF.js","assets/IntentPlannerPage-DZM25uFS.js","assets/ProviderModelSelector-BJabBjza.js","assets/WorkspaceDirectoryPicker-8T8 ...

2import{C as e,T as t,_ as n,b as r,c as i,h as a,m as o,p as s,v as c,w as l,x as u,y as d}from"./fullcalendar-iGCACCSG.js";import{t as

3`);u=n.pop()??``;let r=``;for(let e of n)if(e.startsWith(`data:`))r+=e.slice(5).trimStart();else if(e===``&&r){let e=mn(r);e&&(yield e),r=``}}}finally{l.releaseLock()}}function hn(e){let t=new AbortController;for(let n of e){if(n.aborted){t.abort(n.reason);break}n.addEventListener(`abort`,()=>t.abort(n.reason),{once:!0})}return t.signal}var G=e=>typeof e==`string`&&e.trim().length>0?e:null,gn=e=>new Promise(t=>setTimeout(t,e)),_n=e=>{try{let t=qt.parse(e);if(t)return t}catch{let t=e.run||null;if(t)try{let e=qt.parse(t);if(e)return e}catch{}}throw Error(`Run ID missing in engine response`)},vn= ...

4`)}function Yr(e){let t=String(e?.approval_id||e?.id||``),n=String(e?.run_id||``);return{request_id:t,source:`aca_external_action`,tenant:{org_id:`local`,workspace_id:`aca`},run_id:n,workflow_name:`ACA ${String(e?.adapter||`external action`)}`,action_kind:String(e?.action_type||`external_action`),action_preview_markdown:Jr

Long lines were clipped for display.

bin/setup.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { spawn } from "child_process";

4import { createServer } from "http";

5import { readFileSync, existsSync, createReadStream, createWriteStream } from "fs";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/setup.jsView on unpkg · L2

6import { mkdir, readdir, stat, rm, readFile, rename, writeFile }

bin/cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3import { basename } from "path";

4import { spawn } from "child_process";

5import { fileURLToPath } from "url";

7import { printInitSummary, initializeInstall } from "../lib/setup/bootstrap.js";

8import

dist/assets/vendor-vciVI5Np.jsView file

Lines 136-176javascript

136`){let{fold:t,offset:i}=Ed(e,r);n+=t,r=i}else if(i===`\\`){let i=e[++r],a=Dd[i];if(a)n+=a;else if(i===`

137`)for(i=e[r+1];i===` `||i===` `;)i=e[++r+1];else if(i===`\r`&&e[r+1]===`

138`)for(i=e[++r+1];i===` `||i===` `;)i=e[++r+1];else if(i===`x`||i===`u`||i===`U`){let a=i===`x`?2:i===`u`?4:8;n+=Od(e,r+1,a,t),r+=a}else{let i=e.substr(r-1,2);t(r-1,`BAD_DQ_ESCAPE`,`Invalid escape sequence ${i}`),n+=i}}else if(i===`

bin/service-local.shView file

•path = bin/service-local.sh kind = build_helper sizeBytes = 1892 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/service-local.shView on unpkg

Source & flagged code

5 flagged · loading source

dist/assets/index-D2jasLWI.jsView file

2import{C as e,T as t,_ as n,b as r,c as i,h as a,m as o,p as s,v as c,w as l,x as u,y as d}from"./fullcalendar-iGCACCSG.js";import{t as f}from"./preact-vendor-CW8wYfTt.js";import{a... L3: `);u=n.pop()??``;let r=``;for(let e of n)if(e.startsWith(`data:`))r+=e.slice(5).trimStart();else if(e===``&&r){let e=mn(r);e&&(yield e),r=``}}}finally{l.releaseLock()}}function hn(... L4: `)}function Yr(e){let t=String(e?.approval_id||e?.id||``),n=String(e?.run_id||``);return{request_id:t,source:`aca_external_action`,tenant:{org_id:`local`,workspace_id:`aca`},run_id...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/index-D2jasLWI.jsView on unpkg · L2

bin/setup.jsView file

2L3: import { spawn } from "child_process"; L4: import { createServer } from "http"; L5: import { readFileSync, existsSync, createReadStream, createWriteStream } from "fs"; ... L82: for (const [key, value] of Object.entries(parsed)) { L83: if (process.env[key] === undefined) process.env[key] = value; L84: } ... L89: const name = String(username || "").trim(); L90: if (!name) return homedir(); L91: try { L92: const passwd = readFileSync("/etc/passwd", "utf8"); L93: for (const line of passwd.split(/\r?\n/)) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/setup.jsView on unpkg · L2

bin/cli.jsView file

3Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, execution+network L3: import { basename } from "path"; L4: import { spawn } from "child_process"; L5: import { fileURLToPath } from "url"; ... L23: stdio: "inherit", L24: env: process.env, L25: }); ... L33: const serviceUser = String(cli.value("service-user") || process.env.SUDO_USER || process.env.USER || "").trim(); L34: const homeDir = (await resolveUserHome(serviceUser || process.env.USER, process.platform)) || paths.home; L35: const options = { ... L118: console.log("Mobile pairing is not implemented in this build."); L119: console.log(`Control panel: http://${doctor.panelHost}:${doctor.panelPort}`); L120: console.log(`Public URL: ${doctor.panelPublicUrl || "(not configured)"}`);

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cli.jsView on unpkg · L3

dist/assets/vendor-vciVI5Np.jsView file

156contains invisible/control Unicode U+FEFF (zero width no-break space) `};delete e.items,Object.assign(e,{type:n,source:t,end:[r]});break}default:{let r=`indent`in e?e.indent:-1,i=`end`in e&&Array.isArray(e.end)?e.end.filter(e=>e.type===`space`||e.type===`comment`||e.type===`newline`):[];for(let t of Object.ke

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/assets/vendor-vciVI5Np.jsView on unpkg · L156

bin/service-local.shView file

•path = bin/service-local.sh kind = build_helper sizeBytes = 1892 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/service-local.shView on unpkg

Findings

1 Critical1 High5 Medium6 Low

CriticalTrojan Source Unicodedist/assets/vendor-vciVI5Np.js

HighEntrypoint Build Divergencebin/cli.js

MediumDynamic Requiredist/assets/index-D2jasLWI.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperbin/service-local.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptobin/setup.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/assets/index-D2jasLWI.jsView file

Lines 1-4javascript

2import{C as e,T as t,_ as n,b as r,c as i,h as a,m as o,p as s,v as c,w as l,x as u,y as d}from"./fullcalendar-iGCACCSG.js";import{t as

Long lines were clipped for display.

bin/setup.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { spawn } from "child_process";

4import { createServer } from "http";

5import { readFileSync, existsSync, createReadStream, createWriteStream } from "fs";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/setup.jsView on unpkg · L2

6import { mkdir, readdir, stat, rm, readFile, rename, writeFile }

bin/cli.jsView file

Lines 1-23javascript

1#!/usr/bin/env node

3import { basename } from "path";

4import { spawn } from "child_process";

5import { fileURLToPath } from "url";

7import { printInitSummary, initializeInstall } from "../lib/setup/bootstrap.js";

8import

dist/assets/vendor-vciVI5Np.jsView file

Lines 136-176javascript

136`){let{fold:t,offset:i}=Ed(e,r);n+=t,r=i}else if(i===`\\`){let i=e[++r],a=Dd[i];if(a)n+=a;else if(i===`

137`)for(i=e[r+1];i===` `||i===` `;)i=e[++r+1];else if(i===`\r`&&e[r+1]===`

bin/service-local.shView file

•path = bin/service-local.sh kind = build_helper sizeBytes = 1892 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/service-local.shView on unpkg