registry / @markjaquith/agency / 2.21.0

@markjaquith/agency@2.21.0

Manage agentic work across repositories with durable workbases

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `agency integration sync` or `agency work` in an Agency workbase.

Impact

Can create managed agent instructions/configuration and invoke a configured local runner in the selected workbase.

Mechanism

Explicit workbase agent-config mutation and runner process launch.

Rationale

Source inspection found explicit, scoped AI-agent integration behavior but no concrete malicious chain. Per policy, explicit user-command agent configuration mutation warrants a warn-level verdict rather than a block.

Evidence

package.jsonsrc/commands/integration.tssrc/services/IntegrationService.tssrc/workbase/agents-file.tssrc/workbase/opencode-file.tssrc/commands/work.tssrc/workbase/runner-command.tsAGENTS.md.opencode/opencode.jsoncagency.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`agency integration sync` writes `AGENTS.md` and `.opencode/opencode.jsonc` in a discovered workbase.
`agency work` explicitly launches configured or built-in `opencode`/`claude` runner commands.
Runner configuration supports argv and environment templates from workbase configuration.

Evidence against

`package.json` has no preinstall, install, postinstall, or prepare lifecycle hook.
Integration writes require the explicit `integration sync` subcommand.
Integration preserves symlinked/customized files and only updates missing or checksum-managed content.
No source use of fetch, HTTP clients, dynamic code loading, eval, or VM APIs was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 104 file(s), 630 KB of source, external domains: example.com, github.com, json-schema.org, opencode.ai

Source & flagged code

1 flagged

src/cli.test.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @markjaquith/agency@2.19.0 matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:2.19.0 similarity = 0.859 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli.test.tsView on unpkg

Source & flagged code

1 flagged · loading source

src/cli.test.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @markjaquith/agency@2.19.0 matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:2.19.0 similarity = 0.859 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli.test.tsView on unpkg

Findings

1 High1 Medium4 Low

HighPrevious Version Dangerous Deltasrc/cli.test.ts

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LPM CLI

Source & flagged code

1 flagged

src/cli.test.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @markjaquith/agency@2.19.0 matchedIdentity = npm:QG1hcmtqYXF1aXRoL2FnZW5jeQ:2.19.0 similarity = 0.859 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/cli.test.tsView on unpkg