@sciagent/cli@1.1.92
SciAgent CLI - AI Research Assistant
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is a high-risk remote payload carrier with install-time global mutation and no integrity verification, but the inspected source does not prove malicious intent or a concrete theft/destructive chain.
Static reason
One or more suspicious static signals were detected.
Trigger
npm installation (postinstall), then invoking the sciagent command
Impact
A compromised configured release source or mirror can supply code executed as the installing user.
Mechanism
unverified remote binary staging, global dependency installation, and later execution
AI rationale
This is a high-risk remote payload carrier with install-time global mutation and no integrity verification, but the inspected source does not prove malicious intent or a concrete theft/destructive chain.
Evidence
package.jsonscripts/postinstall.jsbin/sciagent.js~/.sciagent/bin/sciagent~/.sciagent/bin/codebuddy-headless
Network endpoints5
jihulab.compx1-jcy.matpool.commirrors.cloud.tencent.commirrors.aliyun.compypi.org
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- package.json runs scripts/postinstall.js automatically.
- scripts/postinstall.js downloads platform binaries without checksum/signature verification.
- postinstall installs @tencent-ai/codebuddy-code globally and writes executable wrappers.
- bin/sciagent.js later executes the downloaded binary and auto-downloads updates.
- postinstall permanently modifies the Windows user PATH.
Evidence against
- No source evidence of credential/file harvesting or exfiltration.
- Writes are limited to SciAgent directories, temp files, and Windows PATH.
- The remote binaries and SDK are described as this CLI's runtime dependencies; no foreign AI-agent config is modified.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/postinstall.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/sciagent.jsView file
19L20: const { spawn, execSync } = require('child_process');
L21: const path = require('path');
High
Findings
6 High4 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/sciagent.js
HighShellscripts/postinstall.js
HighSandbox Evasion Gated Capabilityscripts/postinstall.js
HighInstall Named Payload Filescripts/postinstall.js
HighRuntime Package Installscripts/postinstall.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @sciagent/cli@1.1.92.
See all versions of @sciagent/cli for other recorded verdicts.
- Review the evidence and your use of @sciagent/cli@1.1.92 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.