registry / @nvergez/orchestrator / 0.3.0

@nvergez/orchestrator@0.3.0

Slack-driven orchestrator-dispatcher daemon: one Claude Code session per Slack thread, delegating work to Orca worktree agents.

AI Security Review

scanned 19h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `orc`, `orc init`, `orc service install`, or `orc update`.

Impact

Configured Slack input can drive gated, allow-listed worktree, GitHub, and Git operations through Claude sessions; explicit service setup persists the package daemon.

Mechanism

Slack-driven AI-agent command orchestration with explicit systemd service management.

Rationale

Source inspection found no install-time hook, stealthy persistence, credential exfiltration, or remote payload execution. The package is nevertheless a dangerous dual-use AI-agent orchestration capability and warrants a warning.

Evidence

package.jsondist/index.jsdist/cli/init.jsdist/cli/service.jsdist/cli/update.jsdist/daemon/claude.jsdist/daemon/permissions.js~/.config/orchestrator/env~/.config/orchestrator/routing-hints.json~/.config/systemd/user/orchestrator.service~/.config/systemd/user/orchestrator-dashboard.service~/.local/state/orchestrator/orchestrator.db

@nvergez/orchestrator@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code