registry / @matatbread/matbot-browser / 0.2.9

@matatbread/matbot-browser@0.2.9

Browser-native backends for the web frontend: an IndexedDB Store, an OPFS file store, and a WebCrypto-backed vault.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User invokes the plugin tool's add action and confirms the prompt; persisted entries replay at browser boot.

Impact

A confirmed operator action can extend the running Matbot browser agent with plugin code.

Mechanism

confirmed remote/plugin loader with browser-storage persistence

Rationale

Source inspection found a user-confirmed, persistent agent-extension path but no concrete malicious chain, install hook, exfiltration, or destructive behavior. Warn for the guarded agent capability rather than block.

Evidence

package.jsonsrc/plugin-tool.tssrc/plugin.tssrc/storage-backend.tssrc/idb-store.ts

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

src/plugin-tool.ts: explicit plugin add calls ctx.loadPlugin(specifier) after confirmation.

@matatbread/matbot-browser@0.2.9

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code