registry / Telemetry / @lincyaw/workbench / 0.2.0-rc.23

@lincyaw/workbench@0.2.0-rc.23

Presmium's workbench panels in React (the documents, a document edited on its rendered page with comments and version history) with the workspace service's client and the preview protocol's workbench side; @lincyaw/dsh places them in presmium studio (expe

AI Security Review

scanned 17h ago · by lpm-firewall-ai

The package implements a React workbench with no install hooks, but its runtime telemetry can include agent request text and selected document quotes. Because this content is sent to the workspace telemetry collector rather than being limited to usage metadata, warn users about the collection.

Static reason

No blocking static signals were detected.

Trigger

The logger starts when a Workbench is constructed; content-bearing events are recorded when the user points at text or sends an agent request, and transmission occurs if the host enables telemetry.

Impact

The workspace telemetry collector receives user prompts and document excerpts as telemetry, beyond ordinary usage counters.

Mechanism

The logger adds user content to operation records and posts batches to the same-origin workspace telemetry route.

AI rationale

Evidence

src/workbench.tssrc/telemetry.tssrc/workspace-client.ts

Network endpoints1

same-origin: api/presmium/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The workbench starts its operation logger automatically; it sends only when the host reports telemetry is enabled.
User initiated agent requests and selected document quotes are added to operation telemetry records.
Telemetry is sent to the same-origin `api/presmium/telemetry` endpoint.
The manifest has no lifecycle scripts or bin and exports workbench UI modules.

Evidence against

Telemetry is disabled when the host does not report it enabled.
The telemetry destination is the same-origin workspace host, not a hard-coded external collector.

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 128 file(s), 1.24 MB of source, external domains: console.volcengine.com

Source & flagged code

8 flagged

src/places.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/places.ts#virtual:normalized:round1View on unpkg

package.jsonView file

18"type": "module", "engines": { "node": ">=22.19" }, "publishConfig": { "access": "public" }, "exports": { ".": "./src/index.ts", "./components": "./src/components

Medium

Suspicious Lifecycle Evidence

The manifest has no lifecycle scripts or bin and exports workbench UI modules.

package.jsonView on unpkg · L18

src/workbench.tsView file

Findings

1 High8 Medium3 Low

HighSemantic Analysis Limitedsrc/places.ts#virtual:normalized:round1

MediumNetwork

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/telemetry.ts

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/telemetry.ts

MediumAi Review Evidencesrc/workspace-client.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @lincyaw/workbench@0.2.0-rc.23.

See all versions of @lincyaw/workbench for other recorded verdicts.

Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.23 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 05:33:04.273Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Telemetry / @lincyaw/workbench / 0.2.0-rc.23

@lincyaw/workbench@0.2.0-rc.23

AI Security Review

scanned 17h ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.

Trigger

The logger starts when a Workbench is constructed; content-bearing events are recorded when the user points at text or sends an agent request, and transmission occurs if the host enables telemetry.

Impact

The workspace telemetry collector receives user prompts and document excerpts as telemetry, beyond ordinary usage counters.

Mechanism

The logger adds user content to operation records and posts batches to the same-origin workspace telemetry route.

AI rationale

Evidence

src/workbench.tssrc/telemetry.tssrc/workspace-client.ts

Network endpoints1

same-origin: api/presmium/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The workbench starts its operation logger automatically; it sends only when the host reports telemetry is enabled.
User initiated agent requests and selected document quotes are added to operation telemetry records.
Telemetry is sent to the same-origin `api/presmium/telemetry` endpoint.
The manifest has no lifecycle scripts or bin and exports workbench UI modules.

Evidence against

Telemetry is disabled when the host does not report it enabled.
The telemetry destination is the same-origin workspace host, not a hard-coded external collector.

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 128 file(s), 1.24 MB of source, external domains: console.volcengine.com

Source & flagged code

8 flagged

src/places.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/places.ts#virtual:normalized:round1View on unpkg

package.jsonView file

18"type": "module", "engines": { "node": ">=22.19" }, "publishConfig": { "access": "public" }, "exports": { ".": "./src/index.ts", "./components": "./src/components

Medium

Suspicious Lifecycle Evidence

The manifest has no lifecycle scripts or bin and exports workbench UI modules.

package.jsonView on unpkg · L18

src/workbench.tsView file

Findings

1 High8 Medium3 Low

HighSemantic Analysis Limitedsrc/places.ts#virtual:normalized:round1

MediumNetwork

MediumSuspicious Lifecycle Evidencepackage.json

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/telemetry.ts

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/telemetry.ts

MediumAi Review Evidencesrc/workspace-client.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @lincyaw/workbench@0.2.0-rc.23.

See all versions of @lincyaw/workbench for other recorded verdicts.

Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.23 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 05:33:04.273Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.