registry / @indigoai-us/hq-cli / 5.345.77
@indigoai-us/hq-cli@5.345.77
HQ by Indigo management CLI — modules and cloud sync
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe lifecycle hook runs a best-effort check for an existing stale package daemon, while agent enrollment is an explicit command. The inspected findings do not establish a concrete attack surface, so the package is clean.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation runs the postinstall script; agent enrollment requires an explicit CLI command.
Impact
No confirmed malicious effect was established from the inspected source.
Mechanism
The postinstall invokes the CLI’s stale-daemon check. The other inspected paths read or update session and policy configuration in their CLI or scaffold context.
AI rationale
The lifecycle hook runs a best-effort check for an existing stale package daemon, while agent enrollment is an explicit command. The inspected findings do not establish a concrete attack surface, so the package is clean.
Decision evidence
public snapshotAI called this Clean at 83.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a postinstall that runs a package-local daemon check; the check invokes the CLI with `mesh daemon install --if-stale`, which only reinstalls an existing stale daemon.
- The agent and policy configuration references are part of CLI commands, scaffold scripts, and a validation hook; the inspected excerpts show scoped session state, settings reads, and policy-file validation.
- Agent enrollment is exposed as the explicit `hq agent enroll` command; no confirmed attack surface was established.
Evidence against
- The lifecycle command is best-effort and targets only the package’s own daemon; the CLI’s `--if-stale` path avoids installing a new service when none is stale.
- The inspected agent-related paths do not establish unconsented lifecycle writes to a foreign agent control surface or credential exfiltration.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
16 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/mesh-daemon-if-stale.mjs || true
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/mesh-daemon-if-stale.mjs || true
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/startup-registration.jsView file
18*/
L19: import { spawnSync } from "node:child_process";
L20: import { stringDerivedPackageRoot } from "./utils/hq-roots.js";
High
Child Process
Package source references child process execution.
dist/startup-registration.jsView on unpkg · L18Findings
9 High9 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/startup-registration.js
HighShelldist/utils/staged-install.js
HighSame File Env Network Executiondist/commands/rescue.js#virtual:normalized:round1
HighCommand Output Exfiltrationdist/commands/rescue.js#virtual:normalized:round1
HighCloud Metadata Accessdist/lib/lanes/machine-identity.js
HighTrigger Reachable Persistencedist/lib/mesh/live/daemon/install.js
HighPayload In Excluded Dirassets/scaffold/.claude/hooks/validate-policy-frontmatter.sh
HighSemantic Analysis Limiteddist/commands/agent-enroll.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
Affected versions and remediation
This report applies to @indigoai-us/hq-cli@5.345.77.
See all versions of @indigoai-us/hq-cli for other recorded verdicts.
- Review the evidence and your use of @indigoai-us/hq-cli@5.345.77 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.