registry / @saltpub/xiaojiu-agent-bridge / 0.1.5
@saltpub/xiaojiu-agent-bridge@0.1.5
Bridge Xiaojiu IM with local CLI coding agents
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged subprocess and HTTP behavior supports the documented Xiaojiu-to-local-agent bridge, and the bot credential is sent to the Xiaojiu API. No unexpected collector or automatic credential harvesting was identified; telemetry requires an explicitly configured adapter.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when a user invokes its command; bridge activity follows user configuration and incoming Xiaojiu messages.
Impact
Expected bridge operation uses the configured bot account and local agent; no malicious impact was identified.
Mechanism
Runs a configured local coding-agent CLI and uses the Xiaojiu API to receive and return messages. No default unrelated collector was identified.
AI rationale
The flagged subprocess and HTTP behavior supports the documented Xiaojiu-to-local-agent bridge, and the bot credential is sent to the Xiaojiu API. No unexpected collector or automatic credential harvesting was identified; telemetry requires an explicitly configured adapter.
Network endpoints3
messenger-api.4399om.comim.4399om.com/open/appregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI binary and a separate library entry point.
- The README describes routing Xiaojiu messages to local coding-agent CLIs and returning results to the same session.
- The CLI's default API host is the Xiaojiu messenger service.
- API requests use the configured base URL and send the bot token as a bearer credential.
- The telemetry adapter is imported only when XIAOJIU_BRIDGE_TELEMETRY_MODULE is set; otherwise loading returns without enabling an adapter.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @saltpub/xiaojiu-agent-bridge@0.1.3
matchedIdentity = npm:[redacted]:0.1.3
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg24import crossSpawn from "cross-spawn";
L25: import { execFile } from "child_process";
L26: function spawnProcess(command, args = [], options = {}) {
High
3import { join } from "path";
L4: if (!process.env.XIAOJIU_BRIDGE_HOME && process.env.npm[redacted] === "cli") {
L5: const localHome = join(process.cwd(), ".xiaojiu");
L6: if (existsSync(join(localHome, "config.json"))) {
...
L17: import { fileURLToPath } from "url";
L18: var packageJsonPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "package.json");
L19: var manifest = JSON.parse(readFileSync(packageJsonPath, "utf8"));
L20: var packageName = manifest.name;
...
L24: import crossSpawn from "cross-spawn";
L25: import { execFile } from "child_process";
L26: function spawnProcess(command, args = [], options = {}) {
...
L87: let settled = false;
Findings
1 Critical2 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighCommand Output Exfiltrationdist/cli.js
MediumDynamic Requiredist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/cli.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @saltpub/xiaojiu-agent-bridge@0.1.5.
See all versions of @saltpub/xiaojiu-agent-bridge for other recorded verdicts.
- Review the evidence and your use of @saltpub/xiaojiu-agent-bridge@0.1.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.