registry / @funny-booth/agent-core / 0.1.21
@funny-booth/agent-core@0.1.21
古い版です。最新版を使ってください
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe source is heavily obfuscated and performs portal authentication and bearer-token requests, but inspected evidence does not establish credential theft, an unrestricted credential destination, or another concrete attack. Classify as suspicious because behavior and reporting activation remain unresolved.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the published CLI or invoking a knowledge or feedback operation.
Impact
The inspected code is consistent with portal authentication and API use, but obfuscation and incomplete destination or activation evidence prevent confirming the handling scope.
Mechanism
The launcher posts entered login credentials to its configured portal; the main module sends a bearer token to that portal, and feedback code posts a token and JSON body to a supplied base URL.
AI rationale
The source is heavily obfuscated and performs portal authentication and bearer-token requests, but inspected evidence does not establish credential theft, an unrestricted credential destination, or another concrete attack. Classify as suspicious because behavior and reporting activation remain unresolved.
Evidence
package.jsondist/launcher.jsdist/index.jsdist/feedback.jslauncher.config.json
Network endpoints1
app.ai-agentos.jp
Decision evidence
public snapshotAI called this Suspicious at 75.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes dist/index.js as its main module and agent-core and salesbot command entrypoints.
- The obfuscated launcher sends an email and password in a POST request, but the destination is resolved through launcher configuration and is not fully inspectable from the excerpt.
- The main module sends a bearer token to its configured portal for a knowledge request.
- The feedback module sends a bearer token and JSON body to a caller-provided base URL; the inspected excerpt does not establish how that URL is restricted or how reporting is activated.
Evidence against
- The inspected package manifest has no preinstall, install, or postinstall hook.
- The included launcher configuration points to the product portal app.ai-agentos.jp.
- The inspected login flow sends credentials entered into the launcher, consistent with portal authentication.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
7 flagged · loading sourcedist/launcher.jsView file
1'use strict';const _0x9fb714=_0x51d6;(function(_0x3b8db7,_0x2b6043){const _0x974c1=_0x51d6,_0x5086de=_0x3b8db7();while(!![]){try{const _0x36e661=parseInt(_0x974c1(0x194))/0x1*(-par...
High
dist/feedback.jsView file
1'use strict';const _0x1ccacd=_0x2089;(function(_0x865e49,_0x50a0c3){const _0x590249=_0x2089,_0x5df1d7=_0x865e49();while(!![]){try{const _0x1a051c=parseInt(_0x590249(0x140))/0x1+-pa...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0x1ccacd=_0x2089;(function(_0x865e49,_0x50a0c3){const _0x590249=_0x2089,_0x5df1d7=_0x865e49();while(!![]){try{const _0x1a051c=parseInt(_0x590249(0x140))/0x1+-pa...
Medium
Findings
1 Critical6 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/launcher.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js#virtual:normalized:round1
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.21.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.21 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.