registry / @funny-booth/agent-core / 0.1.37
@funny-booth/agent-core@0.1.37
AIエージェント起動CLI（共有ランチャー + MCPサーバー）
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe scanner’s obfuscation hints are supported by the source, but the inspected behavior did not establish malicious activity. The package has no install-time lifecycle hook, and its reviewed network behavior is portal authentication and failure reporting.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when invoked; feedback reporting is triggered by a qualifying portal failure or an explicit feedback action.
Impact
The reviewed behavior supports normal portal authentication and operational feedback; no concrete attack impact was established.
Mechanism
The launcher uses configured portal settings, and the portal client sends its token to that portal. Feedback code posts a supplied report payload.
AI rationale
The scanner’s obfuscation hints are supported by the source, but the inspected behavior did not establish malicious activity. The package has no install-time lifecycle hook, and its reviewed network behavior is portal authentication and failure reporting.
Decision evidence
public snapshotAI called this Clean at 76.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json defines a publish-time build hook, with no install-time lifecycle hook.
- dist/launcher.js takes the portal URL from runtime configuration; dist/portalClient.js attaches the token to requests for that configured portal.
- dist/feedback.js sends supplied feedback data by POST; source ties automatic reports to selected failure responses.
Evidence against
- dist/index.js and the flagged files are heavily obfuscated, which makes their behavior harder to audit, but the inspected excerpts did not establish a malicious payload or attack.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscated
NoLicense
Source & flagged code
4 flagged · loading sourcedist/secretValues.jsView file
7// 受け取るのは Mod（Claude Code の中のプログラム）だけで、AI や会話の記録には渡らない。
L8: const vault_1 = require("./vault");
L9: exports.REDACT_MIN = 6;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/secretValues.jsView on unpkg · L7dist/launcher.jsView file
1'use strict';const _0x4034f0=_0x3fdc;function _0x3fdc(_0x4a7879,_0x1b11e1){_0x4a7879=_0x4a7879-0x134;const _0x412d02=_0x412d();let _0x3fdc18=_0x412d02[_0x4a7879];if(_0x3fdc['IUqiZu...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/launcher.jsView on unpkg · L1dist/feedback.jsView file
Findings
1 Critical3 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighSame File Env Network Executiondist/launcher.js
HighObfuscated Payload Loaderdist/feedback.js
HighObfuscated
MediumDynamic Requiredist/secretValues.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @funny-booth/agent-core@0.1.37.
See all versions of @funny-booth/agent-core for other recorded verdicts.
- Review the evidence and your use of @funny-booth/agent-core@0.1.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.