registry / @mcpbox/daruma / 2.0.12

@mcpbox/daruma@2.0.12

Daruma Cloud plugin — RFC 8628 device-code pairing and /v1 API client

AI Security Review

scanned 10h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The explicit `setup` command can fetch and execute current external plugin/installer code, then alter Codex, Cursor, or Claude agent configuration. No install-time execution or covert credential-harvesting path was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `mcpbox-daruma setup` for Codex, Cursor, or Claude Code.

Impact

A compromised upstream repository or latest installer could execute code and persist agent integrations in the selected user or project scope.

Mechanism

Explicit agent extension setup with unpinned remote plugin and `@latest` installer execution.

Rationale

Source shows no lifecycle hook, import-time execution, or concrete exfiltration behavior. The explicit setup path nonetheless executes unpinned external code and mutates agent control surfaces, warranting a warning.

Evidence

package.jsonbin/mcpbox-daruma.mjslib/codex-plugin.mjslib/setup.mjslib/cloud-pair.mjslib/credentials.mjs~/.agents/plugins/marketplace.json~/plugins/daruma/.codex-plugin/plugin.json~/plugins/daruma/.mcp.json~/.codex/config.toml~/.agents/daruma/credentials.json

Network endpoints3

/tupical/daruma.git

@mcpbox/daruma@2.0.12

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code