registry / Telemetry / @lincyaw/workbench / 0.2.0-rc.25

@lincyaw/workbench@0.2.0-rc.25

Presmium's workbench panels in React (the documents, a document edited on its rendered page with comments and version history) with the workspace service's client and the preview protocol's workbench side; @lincyaw/dsh places them in presmium studio (expe

AI Security Review

scanned 9h ago · by lpm-firewall-ai

This is warning-level runtime telemetry: host gating and same-origin delivery reduce risk, but collected records can include request text and workspace-specific paths or identifiers. The transcription adoption code itself uses explicit review and apply actions.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Workbench construction starts telemetry; records are sent if the host reports collection enabled.

Impact

The host's telemetry collector may receive user content and workspace-specific identifiers beyond basic anonymous usage metrics.

Mechanism

Operation records can include composed agent request text, the active document identifier, and changed file paths, then go to the same-origin telemetry endpoint.

AI rationale

Evidence

src/telemetry.tssrc/workbench.tssrc/workspace-client.ts

Network endpoints1

same-origin api/presmium/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Workbench construction starts operation telemetry automatically; collection proceeds when the host reports it is enabled.
After an agent request is sent, its composed text is also recorded as telemetry.
Operation records include the active document identifier and can include changed file paths.
Telemetry is posted to the same-origin api/presmium/telemetry endpoint.

Evidence against

The manifest declares no lifecycle scripts, and telemetry is gated by the host's enabled setting.
The transcription adoption flow requires the user to review and apply a plan; no unrelated network destination was identified.

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 125 file(s), 1.23 MB of source, external domains: console.volcengine.com

Source & flagged code

8 flagged

src/places.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/places.ts#virtual:normalized:round1View on unpkg

src/panels/TranscriptionAdoption.tsxView file

•matchType = previous_version_dangerous_delta matchedPackage = @lincyaw/workbench@0.2.0-rc.23 matchedIdentity = npm:QGxpbmN5YXcvd29ya2JlbmNo:0.2.0-rc.23 similarity = 0.700 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/panels/TranscriptionAdoption.tsxView on unpkg

Findings

2 High7 Medium3 Low

HighSemantic Analysis Limitedsrc/places.ts#virtual:normalized:round1

HighPrevious Version Dangerous Deltasrc/panels/TranscriptionAdoption.tsx

MediumNetwork

MediumAi Review Evidencesrc/telemetry.ts

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/workspace-client.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @lincyaw/workbench@0.2.0-rc.25.

See all versions of @lincyaw/workbench for other recorded verdicts.

Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.25 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 13:48:25.881Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Telemetry / @lincyaw/workbench / 0.2.0-rc.25

@lincyaw/workbench@0.2.0-rc.25

AI Security Review

scanned 9h ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Workbench construction starts telemetry; records are sent if the host reports collection enabled.

Impact

The host's telemetry collector may receive user content and workspace-specific identifiers beyond basic anonymous usage metrics.

Mechanism

Operation records can include composed agent request text, the active document identifier, and changed file paths, then go to the same-origin telemetry endpoint.

AI rationale

Evidence

src/telemetry.tssrc/workbench.tssrc/workspace-client.ts

Network endpoints1

same-origin api/presmium/telemetry

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Workbench construction starts operation telemetry automatically; collection proceeds when the host reports it is enabled.
After an agent request is sent, its composed text is also recorded as telemetry.
Operation records include the active document identifier and can include changed file paths.
Telemetry is posted to the same-origin api/presmium/telemetry endpoint.

Evidence against

The manifest declares no lifecycle scripts, and telemetry is gated by the host's enabled setting.
The transcription adoption flow requires the user to review and apply a plan; no unrelated network destination was identified.

Behavioral surface

Source

FilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 125 file(s), 1.23 MB of source, external domains: console.volcengine.com

Source & flagged code

8 flagged

src/places.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

src/places.ts#virtual:normalized:round1View on unpkg

src/panels/TranscriptionAdoption.tsxView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/panels/TranscriptionAdoption.tsxView on unpkg

Findings

2 High7 Medium3 Low

HighSemantic Analysis Limitedsrc/places.ts#virtual:normalized:round1

HighPrevious Version Dangerous Deltasrc/panels/TranscriptionAdoption.tsx

MediumNetwork

MediumAi Review Evidencesrc/telemetry.ts

MediumAi Review Evidencesrc/workbench.ts

MediumAi Review Evidencesrc/workspace-client.ts

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @lincyaw/workbench@0.2.0-rc.25.

See all versions of @lincyaw/workbench for other recorded verdicts.

Review the evidence and your use of @lincyaw/workbench@0.2.0-rc.25 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-04 13:48:25.881Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.