registry / @praser/roomba / 2.0.1

@praser/roomba@2.0.1

roomba command-line interface

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The CLI intentionally supports installing JavaScript engine plugins from user-provided local paths or HTTP(S) URLs. The bundle is persisted and dynamically imported, so it executes with the invoking user's privileges when installed or later loaded.

Static reason

No blocking static signals were detected.

Trigger

User runs `roomba engine install <url>` and confirms, or later runs a command that loads an installed engine.

Impact

A malicious engine URL can execute arbitrary code as the user after explicit installation.

Mechanism

User-authorized remote plugin download, persistence, and dynamic ESM import.

Rationale

No concrete malicious behavior is present in the package itself, but its explicit engine-install feature downloads and executes arbitrary user-selected JavaScript. Treat it as a warned dangerous-capability package rather than a publish-blocking malware package.

Evidence

package.jsondist/index.jsdist/engines.jsdist/sources.jsdist/download.jsdist/cache.jsdist/self-update.js

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`dist/engines.js` downloads a user-supplied engine bundle, writes it under the user data directory, then dynamically imports it.
`dist/index.js` exposes this as `roomba engine install <url>` and permits noninteractive confirmation with `--yes`.
Installed engine bundles are dynamically imported again by normal CLI commands through `loadEngines`.
`dist/index.js` also provides explicit user-invoked global npm self-update and game-download commands.

Evidence against

`package.json` has no preinstall, install, postinstall, or other lifecycle hook.
Remote engine execution requires an explicit CLI command and a confirmation prompt unless the user supplies `--yes`.
No credential harvesting, environment-secret access, exfiltration, hidden persistence, AI-agent configuration writes, obfuscation, or embedded payload was found.
Network URLs are command or engine inputs; no hard-coded remote host was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 23.6 KB of source

Source & flagged code

1 flagged

dist/engines.jsView file

Lines 37-77javascript

37 if (!engine || typeof engine !== "object") {

38 throw new Error("engine module has no default export");

39 }

40 const e = engine;

41 if (typeof e.id !== "string" ||

42 typeof e.name !== "string" ||

43 typeof e.version !== "string" ||

44 typeof e.apiVersion !== "number" ||

45 typeof e.create !== "function") {

46 throw new Error("default export is not a valid RoomEngine");

47 }

48 if (!/^[a-z0-9][a-z0-9._-]*$/i.test(e.id)) {

49 throw new Error(`engine id "${e.id}" is not a valid identifier`);

50 }

51 if (e.apiVersion !== ENGINE_API_VERSION) {

52 throw new Error(`engine targets API version ${e.apiVersion}, but roomba speaks ${ENGINE_API_VERSION}`);

53 }

54 return engine;

55}

56/** Import an engine bundle from a local file and return its validated RoomEngine. */

57export async function importEngine(bundlePath) {

58 const mod = await import(pathToFileURL(bundlePath).href);

59 return validateEngine(mod);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/engines.jsView on unpkg · L57

60}

61/**

62 * Default `download` for `installEngine`: fetches http(s) URLs, reads

63 * `file:` URLs and local filesystem paths, and rejects other URL schemes.

64 */

65export async function defaultDownload(url) {

66 if (/^https?:\/\//i.test(url)) {

67 const res = await fetch(url);

68 if (!res.ok)

69 throw new Error(`Failed to download ${url}: HTTP ${res.status}`);

70 return res.text();

71 }

72 if (url.startsWith("file:")) {

73 return readFile(fileURLToPath(url), "utf8");

74 }

75 if (/^[a-z][a-z0-9+.-]*:\/\//i.test(url)) {

76 throw new Error(`Unsupported URL scheme for engine install: ${url}`);

77 }

Source & flagged code

1 flagged · loading source

dist/engines.jsView file

57export async function importEngine(bundlePath) { L58: const mod = await import(pathToFileURL(bundlePath).href); L59: return validateEngine(mod);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/engines.jsView on unpkg · L57

Findings

3 Medium2 Low

MediumDynamic Requiredist/engines.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

Source & flagged code

1 flagged

dist/engines.jsView file

Lines 37-77javascript

37 if (!engine || typeof engine !== "object") {

38 throw new Error("engine module has no default export");

39 }

40 const e = engine;

41 if (typeof e.id !== "string" ||

42 typeof e.name !== "string" ||

43 typeof e.version !== "string" ||

44 typeof e.apiVersion !== "number" ||

45 typeof e.create !== "function") {

46 throw new Error("default export is not a valid RoomEngine");

47 }

48 if (!/^[a-z0-9][a-z0-9._-]*$/i.test(e.id)) {

49 throw new Error(`engine id "${e.id}" is not a valid identifier`);

50 }

51 if (e.apiVersion !== ENGINE_API_VERSION) {

52 throw new Error(`engine targets API version ${e.apiVersion}, but roomba speaks ${ENGINE_API_VERSION}`);

53 }

54 return engine;

55}

56/** Import an engine bundle from a local file and return its validated RoomEngine. */

57export async function importEngine(bundlePath) {

58 const mod = await import(pathToFileURL(bundlePath).href);

59 return validateEngine(mod);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/engines.jsView on unpkg · L57

60}

61/**

62 * Default `download` for `installEngine`: fetches http(s) URLs, reads

63 * `file:` URLs and local filesystem paths, and rejects other URL schemes.

64 */

65export async function defaultDownload(url) {

66 if (/^https?:\/\//i.test(url)) {

67 const res = await fetch(url);

68 if (!res.ok)

69 throw new Error(`Failed to download ${url}: HTTP ${res.status}`);

70 return res.text();

71 }

72 if (url.startsWith("file:")) {

73 return readFile(fileURLToPath(url), "utf8");

74 }

75 if (/^[a-z][a-z0-9+.-]*:\/\//i.test(url)) {

76 throw new Error(`Unsupported URL scheme for engine install: ${url}`);

77 }