registry / @runuai/host / 0.4.3

@runuai/host@0.4.3

Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No unconsented install-time attack surface is confirmed. Persistent service setup requires the explicit `uai-host install` command, while AI configuration and credentials are copied only during Docker task setup.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `uai-host install` or starts a task through the host service.

Impact

Expected host-agent persistence and container access for the package's stated orchestration function; no confirmed malicious persistence or exfiltration.

Mechanism

Explicit per-user service setup and task-scoped Docker orchestration.

Rationale

The package is a host-side Docker orchestration agent with intentionally privileged runtime behavior, but source inspection found no lifecycle-triggered execution, credential exfiltration, remote payload execution, or unconsented mutation of a foreign AI-agent control surface. The flagged persistence and credential handling are explicit, package-aligned user/task actions.

Evidence

package.jsonbin/uai-host.mjssrc/cli.tssrc/main.tsscripts/install/darwin.tsscripts/install/linux.tsscripts/install/win.tsscripts/agent/task-up.shlib/mcp-gateway.tssrc/protocol.ts

Network endpoints2

ws://127.0.0.1:8789/host/winsw/winsw/releases/download/v2.12.0/WinSW-x64.exe

@runuai/host@0.4.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code