registry / @lightupai/polaris / 0.0.156
@lightupai/polaris@0.0.156
Record and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest has no install lifecycle scripts, and the flagged Slack flow uses a product-specific token to send signup notifications to Slack. Shell execution and local agent configuration occur in documented commands that users invoke; no malicious behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Signup notifications run after a user completes Google OAuth signup; local setup and performance audits require running their CLI commands.
Impact
No automatic credential theft or unrelated collection was found. User-triggered setup configures the Polaris integration, and the audit runs performance checks.
Mechanism
Signup details are posted to Slack using the configured SIGNUP_SLACK_BOT_TOKEN. The audit utility invokes Lighthouse through npx when manually run.
AI rationale
The manifest has no install lifecycle scripts, and the flagged Slack flow uses a product-specific token to send signup notifications to Slack. Shell execution and local agent configuration occur in documented commands that users invoke; no malicious behavior was identified.
Evidence
src/web/app.tssrc/cli/cli.tsscripts/perf-audit.ts
Network endpoints3
slack.comwww.googleapis.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no install lifecycle hooks; its only npm script is `test`.
- Signup notifications use an explicitly configured Slack bot token and post to Slack’s own API and a fixed internal channel.
- The Slack notification is called from the Google OAuth signup flow, not automatically at package import or install.
- CLI setup writes local Claude Code configuration only when the user runs the onboarding command.
- The Lighthouse shell commands are in a documented, manually invoked audit script.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicenseWildcardDependency
Source & flagged code
6 flaggedscripts/perf-audit.tsView file
14import { mkdirSync, writeFileSync } from "fs";
L15: import { execSync } from "child_process";
L16: import { join } from "path";
High
Child Process
Package source references child process execution.
scripts/perf-audit.tsView on unpkg · L1433console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
L36: const port = await freePort();
L37: url = `http://localhost:${port}`;
L38:
L39: const proc = Bun.spawn(["bun", "run", "src/web/serve.ts"], {
L40: env: { ...process.env, WEB_PORT: String(port), DATABASE_URL: process.env.DATABASE_URL ?? "postgres://polaris:polaris@localhost:5432/polaris" },
L41: stdout: "pipe",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/perf-audit.tsView on unpkg · L3333console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
Findings
1 Critical5 High5 Medium5 Low
CriticalCredential Exfiltrationsrc/web/app.ts
HighChild Processscripts/perf-audit.ts
HighShell
HighSame File Env Network Executionscripts/perf-audit.ts
HighRuntime Package Installscripts/perf-audit.ts
HighSemantic Analysis Limitedbin/polaris
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdocker/bridge-entrypoint.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @lightupai/polaris@0.0.156.
See all versions of @lightupai/polaris for other recorded verdicts.
- Review the evidence and your use of @lightupai/polaris@0.0.156 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.