@optimuslabs/discovery-staging@0.4.6
Shadow AI Discovery — daily heuristic scan for AI agents on macOS endpoints; writes a local JSON report.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThis is undisclosed runtime telemetry: the default CLI uploads the machine UUID, hostname, username, and scan findings to the vendor endpoint, contradicting the README’s local-only claim. The upload serves the package’s discovery feature and no external credentials were found, so the evidence supports a warning rather than a malicious verdict.
Static reason
No blocking static signals were detected.
Trigger
Running the discovery-staging CLI on macOS when a scan is due and OPTIMUS_SKIP_DISCOVERY is unset.
Impact
The vendor receives endpoint-identifying details and discovery results without the package documentation disclosing the upload.
Mechanism
The CLI scans local discovery artifacts, then posts a report containing the hardware UUID, hostname, username, and findings to the configured Optimus API endpoint.
AI rationale
This is undisclosed runtime telemetry: the default CLI uploads the machine UUID, hostname, username, and scan findings to the vendor endpoint, contradicting the README’s local-only claim. The upload serves the package’s discovery feature and no external credentials were found, so the evidence supports a warning rather than a malicious verdict.
Evidence
README.mddist/index.jsdist/upload.jsdist/discover.js.lpm-dependency-evidence-aa086c07-f3b9-48ed-a5ed-baa4da074076/0/npm-linux/dist/endpoint-config.js~/.optimuslabs/management/discovery/latest-report.json~/.optimuslabs/management/discovery/history/~/.optimuslabs/management/auth/auth_key.txt
Network endpoints2
app.optimuslabs.io/endpoint_security/discovery-report/app.optimuslabs.io/endpoint_security/auth/
Decision evidence
public snapshotAI called this Suspicious at 95.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The README says scanning has no network I/O and that backend transport will be added later.
- The CLI wires the report uploader into its default run path, so a normal scan triggers upload.
- The upload payload includes a hardware UUID, hostname, username, and discovery findings.
- The uploader posts to the configured API base at /endpoint_security/discovery-report/; the default base is https://app.optimuslabs.io/.
- The scanner reads shell history to identify agent activity, while the README describes the report as local-only.
Evidence against
- The package is presented as a macOS AI discovery scanner, and the uploaded findings relate to that purpose.
- The uploader uses the package’s configured Optimus endpoint and its machine authentication key; no external-service credentials were found in the runtime path.
- The command has a macOS guard and supports skipping scans with OPTIMUS_SKIP_DISCOVERY.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
Source & flagged code
4 flaggeddist/discover.jsView file
15*/
L16: import { execFileSync, spawnSync } from "node:child_process";
L17: import fs from "node:fs";
High
dist/upload.jsView file
68export function resolveHardwareUuid() {
L69: const fromEnv = process.env.OPTIMUS_HARDWARE_UUID?.trim();
L70: if (fromEnv)
L71: return fromEnv;
L72: const ioregOutput = execSync("ioreg -rd1 -c IOPlatformExpertDevice", {
L73: encoding: "utf8",
...
L81: async function postJsonForAuth(endpointUrl, body) {
L82: const res = await fetch(endpointUrl, {
L83: method: "POST",
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/upload.jsView on unpkg · L68vendor/rg/darwin-x64/rgView file
Findings
4 High4 Medium5 Low
HighChild Processdist/discover.js
HighShell
HighSame File Env Network Executiondist/upload.js
HighSemantic Analysis Limiteddist/index.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryvendor/rg/darwin-x64/rg
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License
Affected versions and remediation
This report applies to @optimuslabs/discovery-staging@0.4.6.
See all versions of @optimuslabs/discovery-staging for other recorded verdicts.
- Review the evidence and your use of @optimuslabs/discovery-staging@0.4.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.