registry / @qwixl/agent-backend / 0.7.0

@qwixl/agent-backend@0.7.0

Owner-controlled Atom agent backend: A2A transport, MLS E2E, signed data objects.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

A deliberately started, externally bound server exposes unauthenticated administrative APIs. If configured with Stripe or Google credentials, a network caller can invoke those capabilities.

Static reason

No blocking static signals were detected.

Trigger

Operator runs `atom-agent` with a reachable HOST/public deployment and configured credentials.

Impact

Unauthorized payment actions or calendar reads/writes on an exposed deployment.

Mechanism

Unauthenticated HTTP admin endpoints invoke configured third-party credential capabilities.

Rationale

No malicious install, persistence, exfiltration, or covert execution chain was found. The unauthenticated credential-backed runtime admin surface is a concrete critical deployment vulnerability.

Evidence

package.jsondist/server.jsdist/paymentAdmin.jsdist/calendarAdmin.jsdist/config.jsdist/identity.jsdist/cli.js

Network endpoints3

api.stripe.com/v1www.googleapis.com/oauth2/v2/userinfoapidata.googleusercontent.com/caldav/v2/

@qwixl/agent-backend@0.7.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code