registry  /  @salesforce/graphiti  /  11.16.0

@salesforce/graphiti@11.16.0

Progressive GraphQL query builder CLI for Salesforce orgs

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
No blocking static signals were detected.
Trigger
User runs `./ralph-loop.sh` with a task file.
Impact
A supplied task or hook can cause the invoked agent or shell to act with the caller's privileges.
Mechanism
Explicit agent loop invoking Claude with unrestricted permissions and optional shell hooks.
Rationale
The package is not concretely malicious or install-active, but it ships an explicit unrestricted AI-agent runner. Downgrade to warn for dangerous dual-use capability rather than block.
Evidence
package.jsonralph-loop.shsrc/mcp/stdio.tssrc/lib/fs-utils.tssrc/lib/introspect.tssrc/lib/auth.tsTASK.mdREFLECTION.mdralph-logs/DONE~/.graphiti

Decision evidence

public snapshot
AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
  • `ralph-loop.sh` explicitly invokes `claude --dangerously-skip-permissions`.
  • `ralph-loop.sh` executes configurable `PRE_CMD` and `ITER_CMD` via `bash -c`.
  • The helper passes a repository task file to an autonomous agent and allows it to create files/logs.
Evidence against
  • `package.json` has no preinstall/install/postinstall lifecycle hook.
  • Published bins are the CLI and MCP stdio server, both activated only by user invocation.
  • Primary source uses Salesforce Core for the configured org and caches sessions/schema under `~/.graphiti`.
  • No application-code child-process, eval/vm, remote payload loader, or foreign AI-agent config write was found.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystem
Supply chain
HighEntropyStrings
Manifest
NoLicense
scanned 133 file(s), 1.09 MB of source

Source & flagged code

1 flagged · loading source
scripts/smoke-orderby.shView file
•path = scripts/smoke-orderby.sh kind = build_helper sizeBytes = 7207 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/smoke-orderby.shView on unpkg

Findings

2 Medium4 Low
MediumEnvironment Vars
MediumShips Build Helperscripts/smoke-orderby.sh
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowNo License