registry / @funny-booth/agent-core / 0.1.30
@funny-booth/agent-core@0.1.30
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe scanner’s obfuscation signal is consistent with the manifest’s publish build, and the inspected launcher and feedback paths do not establish malicious behavior. Feedback submission is an exposed product feature, with automatic reports limited to qualifying portal errors and synthesized metadata.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI starts its MCP server and launcher; qualifying portal errors can trigger automatic feedback reporting.
Impact
No confirmed attack impact was established.
Mechanism
The launcher starts the configured agent process, and feedback reports contain synthesized request and error metadata. The inspected source did not establish command-output capture, secret collection, or an unrelated credential transfer.
AI rationale
The scanner’s obfuscation signal is consistent with the manifest’s publish build, and the inspected launcher and feedback paths do not establish malicious behavior. Feedback submission is an exposed product feature, with automatic reports limited to qualifying portal errors and synthesized metadata.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json points to dist/index.js and runs obfuscation during prepublishOnly; it has no preinstall, install, or postinstall hook.
- dist/index.js starts an MCP server over stdio and exposes feedback submission as a tool with target, title, and detail fields.
- dist/launcher.js launches the configured agent process; inspected source does not establish that its output is collected and sent elsewhere.
- dist/feedback.js gates automatic reports on qualifying HTTP errors and submits synthesized error metadata.
- The feedback request uses the portal client; the inspected paths do not establish secret harvesting or an unrelated credential recipient.
Evidence against
- The published runtime files are obfuscated, which makes source review harder.
- The MCP server instructions encourage agents to submit feedback even without a user request, while telling them not to include project contents or secrets.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
5 flagged · loading sourcedist/feedback.jsView file
1'use strict';const _0x30119d=_0x4ee8;(function(_0x647d65,_0x114ef8){const _0x4242aa=_0x4ee8,_0x55ff04=_0x647d65();while(!![]){try{const _0x4c95d2=parseInt(_0x4242aa(0x13b))/0x1*(-p...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/feedback.jsView on unpkg · L11'use strict';const _0x30119d=_0x4ee8;(function(_0x647d65,_0x114ef8){const _0x4242aa=_0x4ee8,_0x55ff04=_0x647d65();while(!![]){try{const _0x4c95d2=parseInt(_0x4242aa(0x13b))/0x1*(-p...
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/feedback.jsView on unpkg · L1dist/launcher.jsView file
1'use strict';const _0x29290e=_0xc9bb;(function(_0x4b284a,_0x53e331){const _0x54e7e7=_0xc9bb,_0x5d4800=_0x4b284a();while(!![]){try{const _0x7d4e83=parseInt(_0x54e7e7(0x1f5))/0x1*(pa...
High
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighSame File Env Network Executiondist/launcher.js
HighCommand Output Exfiltrationdist/launcher.js#virtual:normalized:round1
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/feedback.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.30.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.