registry / @funny-booth/agent-core / 0.1.22
@funny-booth/agent-core@0.1.22
古い版です。最新版を使ってください
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 11d ago · by lpm-firewall-aiThe source shows deliberate obfuscation and an active update check, but does not establish a concrete malicious chain. Classify as suspicious and warn pending clearer inspection of update and feedback behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the packaged CLI.
Impact
Unresolved risk from opaque runtime behavior; no verified payload execution or credential disclosure was established.
Mechanism
Obfuscated launcher checks for updates and starts the runtime; feedback reporting is gated by shouldAutoReport.
AI rationale
The source shows deliberate obfuscation and an active update check, but does not establish a concrete malicious chain. Classify as suspicious and warn pending clearer inspection of update and feedback behavior.
Evidence
package.jsondist/launcher.jsdist/feedback.js
Decision evidence
public snapshotAI called this Suspicious at 76.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs an obfuscation script when publishing, and the published CLI points to dist/index.js.
- The obfuscated launcher performs an update check before launching its runtime.
- Feedback reporting is conditional on shouldAutoReport; the inspected excerpt does not establish its full scope or recipient.
Evidence against
- package.json has no install, preinstall, or postinstall hook; prepublishOnly is a publishing-time build hook.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedObfuscated
NoLicense
Source & flagged code
5 flagged · loading sourcedist/launcher.jsView file
1'use strict';const _0x34964d=_0x2580;(function(_0x336c71,_0x5351e0){const _0x441230=_0x2580,_0xb0a0c3=_0x336c71();while(!![]){try{const _0x1dd61e=parseInt(_0x441230(0xa7))/0x1*(-pa...
High
dist/feedback.jsView file
1'use strict';function _0x1a79(_0x3477a6,_0x31f098){_0x3477a6=_0x3477a6-0x1c7;const _0x27f02b=_0x27f0();let _0x1a79c4=_0x27f02b[_0x3477a6];if(_0x1a79['VLHnxO']===undefined){var _0x2...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';function _0x1a79(_0x3477a6,_0x31f098){_0x3477a6=_0x3477a6-0x1c7;const _0x27f02b=_0x27f0();let _0x1a79c4=_0x27f02b[_0x3477a6];if(_0x1a79['VLHnxO']===undefined){var _0x2...
Medium
Findings
1 Critical5 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/launcher.js
HighShell
HighSame File Env Network Executiondist/index.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.22.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.