registry / @lightupai/polaris / 0.0.113
@lightupai/polaris@0.0.113
⚠ Under reviewRecord and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe manifest has no install hook, and inspected flagged code has a product-aligned or explicit audit purpose. The CLI source is unreadable as text, including the agent-configuration target, so its behavior remains unresolved and warrants manual review.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Invoking the polaris CLI.
Impact
Unknown; no concrete attack impact was established.
Mechanism
The wrapper launches src/cli/cli.ts, but its behavior could not be determined from the available source bytes.
AI rationale
The manifest has no install hook, and inspected flagged code has a product-aligned or explicit audit purpose. The CLI source is unreadable as text, including the agent-configuration target, so its behavior remains unresolved and warrants manual review.
Evidence
src/cli/cli.tsbin/polaris
Decision evidence
public snapshotAI called this Manual Review at 84.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest exposes CLI binaries but declares no install lifecycle hook.
- The CLI wrapper routes explicit CLI invocation to src/cli/cli.ts, whose contents could not be inspected as text because the file contains NUL bytes.
- The performance audit runs Lighthouse when explicitly invoked; its local build and server setup are guarded by the `local` argument.
Evidence against
- The Slack bridge’s inspected channel creation and event-posting code is consistent with the package’s stated session-to-Slack function.
- The inspected performance-audit commands operate on the selected audit URL and local audit outputs; no credential disclosure was established.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedscripts/perf-audit.tsView file
14import { mkdirSync, writeFileSync } from "fs";
L15: import { execSync } from "child_process";
L16: import { join } from "path";
High
Child Process
Package source references child process execution.
scripts/perf-audit.tsView on unpkg · L1433console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
L36: const port = await freePort();
L37: url = `http://localhost:${port}`;
L38:
L39: const proc = Bun.spawn(["bun", "run", "src/web/serve.ts"], {
L40: env: { ...process.env, WEB_PORT: String(port), DATABASE_URL: process.env.DATABASE_URL ?? "postgres://polaris:polaris@localhost:5432/polaris" },
L41: stdout: "pipe",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/perf-audit.tsView on unpkg · L3333console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
Findings
1 Critical5 High5 Medium5 Low
CriticalCredential Exfiltrationsrc/web/app.ts
HighChild Processscripts/perf-audit.ts
HighShell
HighSame File Env Network Executionscripts/perf-audit.ts
HighRuntime Package Installscripts/perf-audit.ts
HighSemantic Analysis Limitedbin/polaris
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdocker/bridge-entrypoint.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @lightupai/polaris@0.0.113.
See all versions of @lightupai/polaris for other recorded verdicts.
- Review the evidence and your use of @lightupai/polaris@0.0.113 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.