registry / @lightupai/polaris / 0.0.101
@lightupai/polaris@0.0.101
⚠ Under reviewRecord and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe readable source does not establish malicious behavior, and the manifest has no install hook. The CLI source is NUL-containing and its agent-configuration behavior could not be resolved, so the package requires manual review.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Unknown; the CLI source could not be read sufficiently to determine activation.
Impact
No confirmed malicious effect; unresolved CLI behavior prevents a clean determination.
Mechanism
The readable excerpts show a developer-invoked Lighthouse audit and forwarding of project events to connected Slack channels. The CLI’s agent-configuration behavior remains unknown.
AI rationale
The readable source does not establish malicious behavior, and the manifest has no install hook. The CLI source is NUL-containing and its agent-configuration behavior could not be resolved, so the package requires manual review.
Evidence
package.jsonsrc/cli/cli.tsscripts/perf-audit.tssrc/slack/bridge.ts
Network endpoints1
slack.com/api/chat.postMessage
Decision evidence
public snapshotAI called this Manual Review at 82.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest defines CLI entrypoints but no install lifecycle hook.
- The CLI source contains NUL bytes and could not be read as text; its agent-configuration behavior and callers remain unresolved.
- The performance-audit script runs only when invoked and uses shell commands to build CSS and run Lighthouse.
- The Slack bridge forwards project events to the Slack-connected organization’s channels.
Evidence against
- The inspected manifest contains only a test script and no preinstall, install, or postinstall hook.
- The audit script’s inspected shell commands support its stated Lighthouse-audit purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicenseWildcardDependency
Source & flagged code
6 flaggedscripts/perf-audit.tsView file
14import { mkdirSync, writeFileSync } from "fs";
L15: import { execSync } from "child_process";
L16: import { join } from "path";
High
Child Process
Package source references child process execution.
scripts/perf-audit.tsView on unpkg · L1433console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
L36: const port = await freePort();
L37: url = `http://localhost:${port}`;
L38:
L39: const proc = Bun.spawn(["bun", "run", "src/web/serve.ts"], {
L40: env: { ...process.env, WEB_PORT: String(port), DATABASE_URL: process.env.DATABASE_URL ?? "postgres://polaris:polaris@localhost:5432/polaris" },
L41: stdout: "pipe",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/perf-audit.tsView on unpkg · L3333console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
Findings
1 Critical5 High5 Medium5 Low
CriticalCredential Exfiltrationsrc/web/app.ts
HighChild Processscripts/perf-audit.ts
HighShell
HighSame File Env Network Executionscripts/perf-audit.ts
HighRuntime Package Installscripts/perf-audit.ts
HighSemantic Analysis Limitedbin/polaris
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdocker/bridge-entrypoint.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @lightupai/polaris@0.0.101.
See all versions of @lightupai/polaris for other recorded verdicts.
- Review the evidence and your use of @lightupai/polaris@0.0.101 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.