registry / @funny-booth/agent-core / 0.1.29
@funny-booth/agent-core@0.1.29
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe shipped runtime is deliberately obfuscated, leaving the feedback destination and some behavior difficult to verify. Inspected source does not establish a concrete attack, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the launcher or triggering a selected failure in a running tool.
Impact
The update check is consistent with package maintenance. The report contents and destination cannot be fully verified from the inspected obfuscated source.
Mechanism
The launcher queries the npm registry; the feedback module posts a report to a destination encoded in the module.
AI rationale
The shipped runtime is deliberately obfuscated, leaving the feedback destination and some behavior difficult to verify. Inspected source does not establish a concrete attack, so this warrants a warning rather than a block.
Evidence
dist/launcher.jsdist/feedback.jspackage.jsondist/index.js
Network endpoints1
registry.npmjs.org/
Decision evidence
public snapshotAI called this Suspicious at 77.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The publish script explicitly runs an obfuscation step, and the shipped launcher and feedback modules use encoded strings and indirect property lookups, which limits static verification of their behavior.
- The launcher checks the npm registry for a newer package version and the feedback module sends a report when selected failures occur; the report recipient is obscured in the inspected code.
- The MCP entrypoint requires portal credentials from its environment and uses the local vault for token reads and saves.
Evidence against
- The manifest has no preinstall, install, or postinstall hook; its only publish hook builds the package.
- The inspected launcher update check targets registry.npmjs.org, and the MCP entrypoint requires explicit portal credentials to start. No concrete credential theft, destructive action, or remote code execution was established.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
3 flagged · loading sourcedist/feedback.jsView file
1'use strict';const _0xb845d6=_0x36bd;(function(_0x348196,_0xf1b430){const _0x40602c=_0x36bd,_0x358ab7=_0x348196();while(!![]){try{const _0x47fd3c=parseInt(_0x40602c(0xfb))/0x1+-par...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0xb845d6=_0x36bd;(function(_0x348196,_0xf1b430){const _0x40602c=_0x36bd,_0x358ab7=_0x348196();while(!![]){try{const _0x47fd3c=parseInt(_0x40602c(0xfb))/0x1+-par...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/feedback.jsView on unpkg · L1dist/launcher.jsView file
1'use strict';const _0x432881=_0x18f7;(function(_0xefdbc2,_0x219474){const _0x232475=_0x18f7,_0x165d9a=_0xefdbc2();while(!![]){try{const _0x8e2b41=-parseInt(_0x232475(0x220))/0x1*(p...
High
Findings
3 High4 Medium6 Low
HighSame File Env Network Executiondist/launcher.js
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.29.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.