registry / @lightupai/polaris / 0.0.160
@lightupai/polaris@0.0.160
Record and stream Claude Code sessions to Slack. Like Gong for AI coding — capture every prompt, response, and tool call. Multiplayer collaboration across AI coding agents.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest has no install lifecycle scripts, and the flagged credential flows send tokens to the corresponding services: the configured Slack workspace or Google’s user-info API. CLI integration writes and audit execution are user-triggered, while signup reporting is an app feature using an optional configured Slack token.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Server signup or hourly reporting, user-initiated OAuth, explicit CLI setup/update commands, or manually running the Lighthouse audit.
Impact
No unauthorized credential collection, unrelated data transfer, or install-time execution was found.
Mechanism
Signup details go to Slack using an optional configured Slack bot token; OAuth tokens go to Google’s user-info API. CLI setup writes local integration configuration when invoked.
AI rationale
The manifest has no install lifecycle scripts, and the flagged credential flows send tokens to the corresponding services: the configured Slack workspace or Google’s user-info API. CLI integration writes and audit execution are user-triggered, while signup reporting is an app feature using an optional configured Slack token.
Evidence
package.jsonsrc/web/app.tssrc/cli/cli.tsscripts/perf-audit.ts
Network endpoints3
slack.com/api/chat.postMessagewww.googleapis.com/oauth2/v3/userinforegistry.npmjs.org/@lightupai/polaris/latest
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines CLI binaries and a test script, with no install lifecycle hook.
- Signup notifications use an optional SIGNUP_SLACK_BOT_TOKEN and post to Slack’s API for internal signup reporting.
- The hourly signup rollup returns without posting when SIGNUP_SLACK_BOT_TOKEN is absent.
- Google OAuth access tokens are sent to Google’s own user-info endpoint after authorization-code validation.
- Agent setup and local component installation are dispatched by explicit CLI commands.
- The Lighthouse audit is documented as a manually run script.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
NoLicenseWildcardDependency
Source & flagged code
7 flaggedscripts/perf-audit.tsView file
14import { mkdirSync, writeFileSync } from "fs";
L15: import { execSync } from "child_process";
L16: import { join } from "path";
High
Child Process
Package source references child process execution.
scripts/perf-audit.tsView on unpkg · L1433console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
L36: const port = await freePort();
L37: url = `http://localhost:${port}`;
L38:
L39: const proc = Bun.spawn(["bun", "run", "src/web/serve.ts"], {
L40: env: { ...process.env, WEB_PORT: String(port), DATABASE_URL: process.env.DATABASE_URL ?? "postgres://polaris:polaris@localhost:5432/polaris" },
L41: stdout: "pipe",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
scripts/perf-audit.tsView on unpkg · L3333console.log(" Building CSS and starting local server ...");
L34: execSync("npx bun x tailwindcss -i src/web/styles/input.css -o src/web/styles/output.css --minify", { stdio: "pipe" });
L35:
Findings
2 Critical5 High5 Medium5 Low
CriticalCredential Exfiltrationsrc/web/app.ts
CriticalPrevious Version Dangerous Deltasrc/cli/cli.ts
HighChild Processscripts/perf-audit.ts
HighShell
HighSame File Env Network Executionscripts/perf-audit.ts
HighRuntime Package Installscripts/perf-audit.ts
HighSemantic Analysis Limitedbin/polaris
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdocker/bridge-entrypoint.sh
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @lightupai/polaris@0.0.160.
See all versions of @lightupai/polaris for other recorded verdicts.
- Review the evidence and your use of @lightupai/polaris@0.0.160 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.