registry / @leanandmean/coding-agent / 0.74.1-scramjet.42
@leanandmean/coding-agent@0.74.1-scramjet.42
Coding agent CLI with read, bash, edit, write tools and session management
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package contains expected high-risk primitives for a coding-agent CLI, but no lifecycle hook, self-dependency chain, credential exfiltration, or unconsented control-surface mutation. The Doom example and dynamic extension loading do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the coding agent, loads an extension, or uses a feature that requires a missing local search tool.
Impact
Extensions can execute with the coding agent’s user-granted capabilities; no hidden package-triggered attack was found.
Mechanism
User-invoked extension loading, command execution, and optional tool retrieval.
AI rationale
The package contains expected high-risk primitives for a coding-agent CLI, but no lifecycle hook, self-dependency chain, credential exfiltration, or unconsented control-surface mutation. The Doom example and dynamic extension loading do not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall hook.
- Extensions are imported only when the running agent discovers local, global, or configured extension paths.
- Command execution is an exposed runtime feature for extension and coding-agent operations, with shell disabled by default.
- The tool manager downloads fd or ripgrep only after a running interactive session finds the tool missing.
- The added Doom artifact is a bundled WebAssembly example, not an install-time payload.
Evidence against
- No credential harvesting or unconsented exfiltration was found in the inspected paths.
- No package self-dependency or automatic lifecycle execution was present.
- No code writes to foreign AI-agent configuration during npm installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
9 flaggeddist/core/exec.jsView file
3*/
L4: import { spawn } from "node:child_process";
L5: import { StringDecoder } from "node:string_decoder";
High
dist/utils/tools-manager.jsView file
187const script = "& { param($archive, $destination) $ErrorActionPreference = 'Stop'; Expand-Archive -LiteralPath $archive -DestinationPath $destination -Force }";
L188: const powershellFailure = runExtractionCommand("powershell.exe", [
L189: "-NoLogo",
High
examples/extensions/doom-overlay/doom-engine.tsView file
Findings
1 Critical4 High6 Medium5 Low
CriticalPrevious Version Dangerous Deltaexamples/extensions/doom-overlay/doom/build/doom.js
HighChild Processdist/core/exec.js
HighShelldist/utils/tools-manager.js
HighCommand Output Exfiltrationexamples/extensions/doom-overlay/doom/build/doom.js
HighSemantic Analysis Limiteddist/utils/shell.js#virtual:normalized:round1
MediumDynamic Requiredist/core/extensions/loader.js
MediumNetwork
MediumEnvironment Vars
MediumShips Wasm Moduleexamples/extensions/doom-overlay/doom/build/doom.wasm
MediumShips Build Helperexamples/extensions/doom-overlay/doom/build.sh
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to @leanandmean/coding-agent@0.74.1-scramjet.42.
See all versions of @leanandmean/coding-agent for other recorded verdicts.
- Review the evidence and your use of @leanandmean/coding-agent@0.74.1-scramjet.42 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.