@markus-global/cli@0.11.1
Markus — AI Digital Workforce Platform
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source shows user-command activation of external agent configuration and skill mutation, which the supplied policy classifies as warning-only capability risk. No source evidence establishes malicious intent or block-eligible installation behavior.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
The user invokes markus install openclaw without skipping connection.
Impact
Changes the external agent's integration settings and available skills.
Mechanism
The command registers the agent, obtains a token, writes Markus connection fields into platform configuration, and copies a skill template.
AI rationale
Inspected source shows user-command activation of external agent configuration and skill mutation, which the supplied policy classifies as warning-only capability risk. No source evidence establishes malicious intent or block-eligible installation behavior.
Evidence
dist/commands/install-agent.jsdist/connector-service.jsconnectors/openclaw.json~/.openclaw/openclaw.json~/.openclaw/skills
Network endpoints1
localhost:8056
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit install command connects an external agent platform to Markus.
- The command writes connection settings after obtaining a token.
- The connector service rewrites platform configuration and recursively copies integration skills.
- The OpenClaw connector targets its configuration and skills directory.
- The manifest has no install lifecycle hooks or runtime self-dependency.
Evidence against
- Configuration changes require an explicit CLI command; no unconsented npm installation mutation was identified.
- The flagged similarity chunk contains Mermaid diagram parsing code.
- No concrete malicious execution or covert exfiltration was established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
15 flaggeddist/web-ui/assets/index-DQZuBgCk.jsView file
10patternName = generic_password
severity = medium
line = 10
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/web-ui/assets/index-DQZuBgCk.jsView on unpkg · L1019patternName = generic_password
severity = medium
line = 19
Medium
Secret Pattern
Hardcoded password in dist/web-ui/assets/index-DQZuBgCk.js
dist/web-ui/assets/index-DQZuBgCk.jsView on unpkg · L19357patternName = generic_password
severity = medium
line = 357
Medium
Secret Pattern
Hardcoded password in dist/web-ui/assets/index-DQZuBgCk.js
dist/web-ui/assets/index-DQZuBgCk.jsView on unpkg · L357dist/utils/browser.js
Findings
6 High10 Medium7 Low
HighChild Processdist/utils/browser.js
HighShelldist/commands/update.js
HighSame File Env Network Executiondist/utils/browser.js
HighShips High Entropy Blobdist/markus-browser-extension.zip
HighSemantic Analysis Limiteddist/web-ui/assets/DeliverableShareModal-7skvb6AH.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/web-ui/assets/chunk-AQP2D5EJ-fIC-6Whq.js
MediumSecret Patterndist/web-ui/assets/index-DQZuBgCk.js
MediumDynamic Requiredist/web-ui/assets/viz-global-C_AyN6D9.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobdist/markus-browser-extension.zip
Medium
Affected versions and remediation
This report applies to @markus-global/cli@0.11.1.
See all versions of @markus-global/cli for other recorded verdicts.
- Review the evidence and your use of @markus-global/cli@0.11.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.