registry / @inkeep/open-knowledge / 0.66.2

@inkeep/open-knowledge@0.66.2

Local-first, agent-friendly Markdown knowledge base with a cross-platform CLI and web editor

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is not malicious install-hook abuse because installation is inert. Its explicit CLI setup and automatic-on-start editor-skill maintenance warrant a warning for agent-extension lifecycle risk.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Running `ok init` or `ok start`.

Impact

These commands can alter selected editor and project control surfaces; this is a guarded but sensitive agent-extension capability.

Mechanism

CLI-managed MCP and skill integration for AI editors.

AI rationale

This is not malicious install-hook abuse because installation is inert. Its explicit CLI setup and automatic-on-start editor-skill maintenance warrant a warning for agent-extension lifecycle risk.

Evidence

package.jsondist/init-DwE-82L_.mjsdist/repair-skills-BftHPTbX.mjsdist/native/index.js.ok/~/.ok/SKILL.md

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The explicit `ok init` command scaffolds a project and registers an MCP server for editors.
The explicit `ok start` path automatically refreshes bundled skills across installed AI editors.
The package writes a managed Pi bridge as part of its user-invoked initialization.

Evidence against

package.json has no preinstall, install, or postinstall hook.
There is no runtime dependency on this package name.
The native loader is a standard platform-binding selector; no remote payload retrieval was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetryUrlStrings

Source & flagged code

20 flagged

dist/lib-B82GtN9K.mjsView file

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib-B82GtN9K.mjsView on unpkg · L39

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in dist/lib-B82GtN9K.mjs

dist/lib-B82GtN9K.mjsView on unpkg · L39

1import{o as e,t}from"./chunk-DTipWd-i.mjs";import{n}from"./wrapper-BR9ZCXZF.mjs";import{Blob as r,Buffer as i}from"buffer";import{TextDecoder as a,TextEncoder as o}from"util";impor... L2: `+t+`at`)}else typeof r==`object`&&r.message&&r.stack?n+=r.stack.replace(/\n at/gm,` ... L38: Y3FblSokcA== L39: -----END CERTIFICATE-----`,key:`-----BEGIN PRIVATE KEY----- L40: [redacted] ... L67: \r L68: `);var qu=class e{reject=null;resolve=null;listeners={onSignalAbort:this.onSignalAbort.bind(this)};isChunkedTransfer=!1;isProperLastChunkReceived=!1;previousChunk=null;nodeRequest=... L69: ... L71: `),o+=a,i&&!i.disableErrorCapturing&&i.errorCapture===Ls.tryAndCatch&&(o+=`} catch(e) { $happy_dom.dispatchError(e); }`),o+=`})`;let s=null;try{s=r[Fe](o,{filename:r.location.href}... L72: `);let o=a;s

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

dist/lib-B82GtN9K.mjsView on unpkg · L1

dist/init-DwE-82L_.mjsView file

1import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{yt as r}from"./sleep-CKSyI4wt.mjs";import{Bs as i,_s as a,oc as o,ot as s,rt as c}from"./src-CP2xsmg5.mjs";import{Ar a... L2: `),u=!1;for(let e=0;e<l.length;e++){let t=l[e];if(r+=t,u)u=!1;else if(u=t>=`\ud800`&&t<=`\udbff`,u)continue;if(t===`\x1B`||t===``){Vt.lastIndex=e+1;let t=Vt.exec(l)?.groups;if(t?....

High

Child Process

Package source references child process execution.

dist/init-DwE-82L_.mjsView on unpkg · L1

dist/src-HFlqeGnA.mjsView file

26`).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;d(n===void 0?r:`${r}: ${n.slice(0,300)}`)})})}function gE(e,t=5e3,n){let r=process.platform===`win32`,i=CE(e);return new P... L27: `).map(e=>e.trim()).find(e=>e!==``),r=t??`exit code ${e}`;u(n===void 0?`Node.js version probe failed with ${r}`:`Node.js version probe failed with ${r}: ${n.slice(0,300)}`);return}... L28: `)}\n`;this.enqueue(e,async()=>{if(!this.appendBroken.has(e))try{await Mc(this.eventsPath(e),n)}catch(t){this.appendBroken.add(e),this.log.error({err:t,threadId:e},`[acp-persist] e...

High

Shell

Package source references shell execution.

dist/src-HFlqeGnA.mjsView on unpkg · L26

1import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{$t as r,A as i,At as a,B as o,Bt as s,Ct as c,D as l,Dt as u,Et as d,Gt as f,H as p,Ht as m,I as h,It as g,J as _,Jt a... L2: `)){let e=n.trim();if(e.startsWith(`ok-contributors: `))try{let n=JSON.parse(e.slice(17));if(typeof n==`object`&&n&&`id`in n&&typeof n.id==`string`&&`name`in n&&typeof n.name==`str... L3: `)){let e=t.trim();if(!e.startsWith(Kd))continue;let n;try{n=JSON.parse(e.slice(10))}catch{return null}return typeof n!=`object`||!n?null:Jd(n)}return null}function Yd(e){if(!e)ret... L4: `)){let e=n.trim();if(!e.startsWith(Kd))continue;let r;try{r=JSON.parse(e.slice(10))}catch{continue}if(typeof r!=`object`||!r)continue;let i=Jd(r);i&&t.push(i)}return t}function Xd... L5: `,i=e.getWriter();try{await i.write(n.encode

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/src-HFlqeGnA.mjsView on unpkg · L1

dist/chunk-5QMZ5MUS-C5NTf5Rj.mjsView file

1import{t as e}from"./chunk-DXB73IDG-BBwE27jK.mjs";function t(){let e=[{prop:`Function`,target:globalThis,violationType:`function_constructor`,strategy:`throw`,reason:`Function cons... L2:

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-5QMZ5MUS-C5NTf5Rj.mjsView on unpkg · L1

dist/native/index.jsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.31.0 matchedPath = dist/native/index.js matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.31.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/native/index.jsView on unpkg

5L6: const { readFileSync } = require('fs') L7: let nativeBinding = null

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/native/index.jsView on unpkg · L5

dist/public/assets/dist-As2x8uCt.jsView file

155contains invisible/control Unicode U+FEFF (zero width no-break space) `,this.pos),this.lineEndPos=e),e===-1?this.atEnd?this.buffer.substring(this.pos):null:(this.buffer[e-1]===`\r`&&--e,this.buffer.substring(this.pos,e))}hasChars(e){return this.pos+e<=this.buffer.length}setNext(e){return this.buffer=this.buff

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/public/assets/dist-As2x8uCt.jsView on unpkg · L155

dist/resolve-project-root-BCdGoKNz.mjsView file

1Cross-file remote execution chain: dist/resolve-project-root-BCdGoKNz.mjs spawns dist/src-CP2xsmg5.mjs; helper contains network access plus dynamic code execution. L1: import{i as e,o as t,t as n}from"./chunk-DTipWd-i.mjs";import{Hs as r,Ls as i,Rs as a,ks as o,qs as s}from"./src-CP2xsmg5.mjs";import{Bi as c,Ir as l,hi as u,jr as d,yn as f}from".... L2: `)}displayWidth(e){return r(e).length}styleTitle(e){return e}styleUsage(e){return e.split(` `).map(e=>e===`[options]`?this.styleOptionText(e):e===`[command]`?this.styleSubcommandTe... ... L9: - too many long flags`):Error(`${n} L10: - unrecognised flag format`)}if(t===void 0&&n===void 0)throw Error(`option creation failed due to no flags found in '${e}'.`);return{shortFlag:t,longFlag:n}}e.Option=n,e.DualOption... L11: - specify the name in

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/resolve-project-root-BCdGoKNz.mjsView on unpkg · L1

dist/native/native-config.linux-arm64-musl.nodeView file

•path = dist/native/native-config.linux-arm64-musl.node kind = native_binary sizeBytes = 797800 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/native/native-config.linux-arm64-musl.nodeView on unpkg

dist/dist-bundle-EXrl9_Zm.mjsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/dist-bundle-EXrl9_Zm.mjsView on unpkg

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/dist-bundle-GEZgvZIe.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/dist-bundle-EXrl9_Zm.mjsView on unpkg

dist/open-browser-DIMVmm0o.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.30.0 matchedPath = dist/open-browser-B0EHWyOL.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/open-browser-DIMVmm0o.mjsView on unpkg

dist/chunk-WRU74C26-BESBlKtm.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.36.0 matchedPath = dist/chunk-Q4XR5HBZ-DE_erWE4.mjs matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.36.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-WRU74C26-BESBlKtm.mjsView on unpkg

dist/chunk-ZIRB5QZD-B2znOhor.mjsView file

•matchType = normalized_sha256 matchedPackage = @inkeep/open-knowledge@0.30.0 matchedPath = dist/public/assets/chunk-XPW4576I-DZebSSCr.js matchedIdentity = npm:QGlua2VlcC9vcGVuLWtub3dsZWRnZQ:0.30.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/chunk-ZIRB5QZD-B2znOhor.mjsView on unpkg

dist/public/assets/chunk-ZUYEQ4TG-CQSwzpWR.jsView file

1patternName = google_api_key severity = high line = 1 matchedText = var e={V...AZZX

High

Secret Pattern

Google API key in dist/public/assets/chunk-ZUYEQ4TG-CQSwzpWR.js

dist/public/assets/chunk-ZUYEQ4TG-CQSwzpWR.jsView on unpkg · L1

Source & flagged code

20 flagged · loading source

dist/lib-B82GtN9K.mjsView file

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/lib-B82GtN9K.mjsView on unpkg · L39

39patternName = private_key_rsa severity = critical line = 39 matchedText = -----END...----

Critical

Secret Pattern

RSA private key in dist/lib-B82GtN9K.mjs

dist/lib-B82GtN9K.mjsView on unpkg · L39

Findings

3 Critical12 High7 Medium8 Low

CriticalCritical Secretdist/lib-B82GtN9K.mjs

CriticalTrojan Source Unicodedist/public/assets/dist-As2x8uCt.js

CriticalSecret Patterndist/lib-B82GtN9K.mjs

HighChild Processdist/init-DwE-82L_.mjs

HighShelldist/src-HFlqeGnA.mjs

HighSame File Env Network Executiondist/src-HFlqeGnA.mjs

HighCommand Output Exfiltrationdist/src-HFlqeGnA.mjs

HighCross File Remote Execution Contextdist/resolve-project-root-BCdGoKNz.mjs

HighSemantic Analysis Limiteddist/dist-bundle-EXrl9_Zm.mjs

HighKnown Malware Source Similaritydist/native/index.js

HighKnown Malware Source Similaritydist/open-browser-DIMVmm0o.mjs

Affected versions and remediation

This report applies to @inkeep/open-knowledge@0.66.2.

See all versions of @inkeep/open-knowledge for other recorded verdicts.

Review the evidence and your use of @inkeep/open-knowledge@0.66.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-29 09:56:36.585Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code