registry / Telemetry / @lincyaw/workbench / 0.2.0-rc.24

@lincyaw/workbench@0.2.0-rc.24

Presmium's workbench panels in React (the documents, a document edited on its rendered page with comments and version history) with the workspace service's client and the preview protocol's workbench side; @lincyaw/dsh places them in presmium studio (expe

AI Security Review

scanned 9h ago · by lpm-firewall-ai

The package automatically starts host-gated runtime telemetry, and an agent-draft event records the user's animation text alongside operation data. The same-origin, host-enabled gate lowers risk, but the source does not show an end-user consent prompt or opt-out for collecting that content.

Static reason

No blocking static signals were detected.

Trigger

Workbench construction starts logging; sending occurs when the host enables collection and an agent-draft operation is recorded.

Impact

The host's telemetry collector may receive user-authored text beyond ordinary usage metrics, without an evident end-user consent prompt or opt-out in this package.

Mechanism

The agent-draft event adds the supplied text to operation attributes, which are batched and posted to the host telemetry endpoint.

AI rationale

Evidence

src/workbench.tssrc/telemetry.tssrc/workspace-client.ts

Network endpoints1

/api/presmium/telemetry (same-origin host)

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Workbench construction starts operation logging automatically; records are sent when the host enables collection.
An agent-draft operation includes the user's animation text in its telemetry attributes.
Telemetry batches are sent with POST or sendBeacon to the same-origin /api/presmium/telemetry endpoint.

Evidence against

Collection is gated on the host reporting that it is enabled, and the code describes the endpoint as the host's collector.
The package presents itself as React workbench panels for document authoring, consistent with recording workbench operations.

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 125 file(s), 1.23 MB of source, external domains: console.volcengine.com

Source & flagged code

6 flagged

src/places.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/places.ts#virtual:normalized:round1View on unpkg

src/workbench.tsView file

427e((n, c) => n + c.removed, 0) }) this.#pendingFlash = changes this.#flashChanges() }) this.telemetry = new OperationLog(() => this.client.readTelemetry(), (batch, beacon) => this.client.sendTelemetry(batch, beacon), this.#state.locale) void this.telemetry.start() } /** Records an operation of the author, with the document, the view and the mode it was done in. */ #record(name: string, attributes:

Medium

Ai Review Evidence

Workbench construction starts operation logging automatically; records are sent when the host enables collection.

src/workbench.tsView on unpkg · L427

Findings

1 High6 Medium3 Low

HighSemantic Analysis Limitedsrc/places.ts#virtual:normalized:round1

MediumNetwork

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/workspace-client.ts

MediumAi Review Evidencesrc/telemetry.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @lincyaw/workbench@0.2.0-rc.24.

See all versions of @lincyaw/workbench for other recorded verdicts.

Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.24 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 13:48:13.650Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Telemetry / @lincyaw/workbench / 0.2.0-rc.24

@lincyaw/workbench@0.2.0-rc.24

AI Security Review

scanned 9h ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.

Trigger

Workbench construction starts logging; sending occurs when the host enables collection and an agent-draft operation is recorded.

Impact

The host's telemetry collector may receive user-authored text beyond ordinary usage metrics, without an evident end-user consent prompt or opt-out in this package.

Mechanism

The agent-draft event adds the supplied text to operation attributes, which are batched and posted to the host telemetry endpoint.

AI rationale

Evidence

src/workbench.tssrc/telemetry.tssrc/workspace-client.ts

Network endpoints1

/api/presmium/telemetry (same-origin host)

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Workbench construction starts operation logging automatically; records are sent when the host enables collection.
An agent-draft operation includes the user's animation text in its telemetry attributes.
Telemetry batches are sent with POST or sendBeacon to the same-origin /api/presmium/telemetry endpoint.

Evidence against

Collection is gated on the host reporting that it is enabled, and the code describes the endpoint as the host's collector.
The package presents itself as React workbench panels for document authoring, consistent with recording workbench operations.

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 125 file(s), 1.23 MB of source, external domains: console.volcengine.com

Source & flagged code

6 flagged

src/places.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/places.ts#virtual:normalized:round1View on unpkg

src/workbench.tsView file

Medium

Ai Review Evidence

Workbench construction starts operation logging automatically; records are sent when the host enables collection.

src/workbench.tsView on unpkg · L427

Findings

1 High6 Medium3 Low

HighSemantic Analysis Limitedsrc/places.ts#virtual:normalized:round1

MediumNetwork

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/workspace-client.ts

MediumAi Review Evidencesrc/telemetry.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @lincyaw/workbench@0.2.0-rc.24.

See all versions of @lincyaw/workbench for other recorded verdicts.

Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.24 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 13:48:13.650Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.