@passioncode-ai/fabric-agent-adapter@0.6.0
Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe package provides a first-party, user-invoked installer that writes its own skills into shared agent directories. That is an agent configuration capability warranting a warning, but the inspected source shows no automatic install hook or concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
A user runs the package's CLI installer.
Impact
The installed skills become available to compatible agents. No unconsented install-time mutation or broader control-surface change was established.
Mechanism
The CLI copies the package's skill directories into ~/.agents/skills or, with --target claude, ~/.claude/skills; existing destinations are skipped unless --force is supplied.
AI rationale
The package provides a first-party, user-invoked installer that writes its own skills into shared agent directories. That is an agent configuration capability warranting a warning, but the inspected source shows no automatic install hook or concrete malicious behavior.
Evidence
package.jsonbin/fabric-agent-adapter.jsplugins/fabric-agent-adapter/.claude-plugin/plugin.json~/.agents/skills~/.claude/skills
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes the installer as a CLI and defines no install lifecycle hook.
- The CLI checks for the package's Claude plugin before choosing an installation path.
- When explicitly run, the CLI copies the package's skills into the user's shared agent skills directory, replacing existing copies only with --force.
- The plugin identifies itself as the Fabric Agent Adapter, matching the skills its installer deploys.
Evidence against
- No package install hook triggers agent configuration changes automatically.
- The inspected CLI changes are user-invoked and limited to this package's skills; no credential forwarding or unrelated network activity was identified.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
CopyleftLicense
Source & flagged code
5 flaggedbin/fabric-agent-adapter.jsView file
•Runtime or CLI code links a write operation to an explicit external AI-agent control path:
backup = path.join(home, '.claude', 'sk[redacted]', `${name}-${date.now()}`);
fs.mkdirsync(path.dirname(backup), { recursive: true });
fs.renamesync(shadow, backup);
console.log(`removed shadowing ${info.issymboliclink() ? 'link' : 'copy'} ${shadow} (kept at ${backup})`);
removed += 1;
}
if (!removed) console.log('no shadowing copies found.');
}
function main(argv) {
const args = argv.slice(2);
if (args.includes('--help') || args.includes('-h')) {
usage();
return 0;
}
const force = args.includes('--force');
const prune = args.includes('--prune-shadow');
let target = 'agents';
const known = new set(['--force', '--prune-shadow']);
const unknown = [];
for (
High
External Ai Agent Control Surface Mutation
Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.
bin/fabric-agent-adapter.jsView on unpkg•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation.
#!/usr/bin/env node
'use strict';
const fs = require('fs');
const path = require('path');
const os = require('os');
const root = path.resolve(__dirname, '..');
const repo = 'passioncode-ai/fabric-agent-adapter';
const plugin_id = 'fabr
Findings
2 High5 Medium5 Low
HighExternal Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/fabric-agent-adapter.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperplugins/fabric-agent-adapter/skills/creating-fabric-agents/scripts/check_dashboard_link.py
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencebin/fabric-agent-adapter.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
Affected versions and remediation
This report applies to @passioncode-ai/fabric-agent-adapter@0.6.0.
See all versions of @passioncode-ai/fabric-agent-adapter for other recorded verdicts.
- Review the evidence and your use of @passioncode-ai/fabric-agent-adapter@0.6.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.