registry / @passioncode-ai/fabric-agent-adapter / 0.31.0
@passioncode-ai/fabric-agent-adapter@0.31.0
Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe package requires an explicit plugin or CLI installation, and the inspected session reporting is limited and conditional. The first-party agent extension setup and session hooks warrant a warning, but the inspected source does not establish a concrete attack.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user installs the Claude plugin, then starts, ends, or continues a session where the hook conditions are met.
Impact
The extension can send limited repository activity metadata to the configured Fabric service; inspected code does not send file contents through this reporting path.
Mechanism
The plugin runs its session script, which may send a commit identifier and aggregate change counts when Fabric MCP exposes the observation tool.
AI rationale
The package requires an explicit plugin or CLI installation, and the inspected session reporting is limited and conditional. The first-party agent extension setup and session hooks warrant a warning, but the inspected source does not establish a concrete attack.
Evidence
bin/fabric-agent-adapter.jsplugins/fabric-agent-adapter/hooks/hooks.jsonplugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session.py
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json declares a CLI but no install lifecycle hook.
- The CLI offers an explicit Claude plugin installation command and copies bundled skills into user skill directories when run.
- The plugin declares session hooks that run the Fabric session script.
- On turn or session end, the script can send a commit identifier and aggregate change counts through Fabric MCP when the observation tool is available.
- The reported configuration location is read to check whether the plugin is installed.
- The separate Codex and Kimi hook installer defaults to a dry run and requires an apply option to write.
Evidence against
- No npm install-time execution or consumer configuration mutation was identified.
- The inspected session reporting sends repository facts rather than file contents and is gated on the Fabric observation tool being available.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggedbin/fabric-agent-adapter.jsView file
•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
'use strict';
const fs = require('fs');
const path = require('path');
const os = require('os');
const root = path.resolve(__dirname, '..');
const repo = 'passioncode-ai/fabric-agent-adapter';
const plugin_id = 'fabr
High
Trigger Reachable External Ai Agent Control Surface Mutation
Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/fabric-agent-adapter.jsView on unpkg13L14: const fs = require('fs');
L15: const path = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/fabric-agent-adapter.jsView on unpkg · L13Findings
3 High6 Medium5 Low
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
HighSemantic Analysis Limitedplugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-identifiers.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltaplugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-hub.mjs
MediumDynamic Requirebin/fabric-agent-adapter.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistenceplugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs
MediumShips Build Helperplugins/fabric-agent-adapter/skills/creating-fabric-agents/scripts/check_dashboard_link.py
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to @passioncode-ai/fabric-agent-adapter@0.31.0.
See all versions of @passioncode-ai/fabric-agent-adapter for other recorded verdicts.
- Review the evidence and your use of @passioncode-ai/fabric-agent-adapter@0.31.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.