@passioncode-ai/fabric-agent-adapter@0.20.0
Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe CLI performs explicit user-invoked agent skill setup, a guarded agent integration capability. No source evidence inspected establishes an automatic install attack or credential exfiltration.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the `fabric-agent-adapter` command.
Impact
The command changes agent skill files, which can affect skills loaded by those agents.
Mechanism
The command copies packaged skills to `~/.agents/skills` or, with a target option, `~/.claude/skills`; shadow cleanup is an explicit option with a plugin-presence check.
AI rationale
The CLI performs explicit user-invoked agent skill setup, a guarded agent integration capability. No source evidence inspected establishes an automatic install attack or credential exfiltration.
Evidence
bin/fabric-agent-adapter.js~/.agents/skills~/.claude/skills
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json defines only a test script and no install lifecycle hook.
- The CLI reads arguments and runs only when invoked as a command.
- The CLI copies package skills to the user’s agent skill directories; removal of Claude shadow copies requires `--prune-shadow` and an installed plugin.
- The inspected helper files contain ordinary interop and profile validation code; no network send was found in the interop helper.
Evidence against
- The inspected source does not establish an automatic install-time change, credential forwarding, or a malicious payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
CopyleftLicense
Source & flagged code
6 flaggedbin/fabric-agent-adapter.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
'use strict';
const fs = require('fs');
const path = require('path');
const os = require('os');
const root = path.resolve(__dirname, '..');
const repo = 'passioncode-ai/fabric-agent-adapter';
const plugin_id = 'fabr
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/fabric-agent-adapter.jsView on unpkg13L14: const fs = require('fs');
L15: const path = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/fabric-agent-adapter.jsView on unpkg · L13Findings
3 High6 Medium5 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
HighSemantic Analysis Limitedplugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-interop.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltaplugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-profiles.mjs
MediumDynamic Requirebin/fabric-agent-adapter.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceplugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs
MediumShips Build Helperplugins/fabric-agent-adapter/skills/creating-fabric-agents/scripts/check_dashboard_link.py
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @passioncode-ai/fabric-agent-adapter@0.20.0.
See all versions of @passioncode-ai/fabric-agent-adapter for other recorded verdicts.
- Review the evidence and your use of @passioncode-ai/fabric-agent-adapter@0.20.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.