registry / @shawnstack/quickforge / 1.5.5

@shawnstack/quickforge@1.5.5

AI chat application with Agent access modes for local workspace tools. React + Vite + Tailwind CSS frontend, local Node.js storage server.

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a local AI workspace application with powerful user-invoked server tools, update, terminal, and provider connectivity.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs quickforge/qf or imports startQuickForge; no install-time execution.

Impact

Benign but high-privilege local app behavior when intentionally run.

Mechanism

Local server and CLI orchestration with workspace tools gated by settings/auth.

Rationale

Static child_process, shell, network, and runtime install findings are explained by a user-invoked local AI workspace tool, CLI updater, health checks, and configurable provider/MCP integrations. I found no install-time execution, credential harvesting, exfiltration, persistence beyond normal app data/pid/logs, or unconsented AI-agent control-surface mutation.

Evidence

package.jsonbin/quickforge.mjsserver/public-api.mjsserver/index.mjsserver/update-supervisor.mjsserver/routes/tools.mjsserver/routes/terminal.mjsserver/tools/index.mjs~/.quickforge~/.quickforge/quickforge.pid~/.quickforge/logsworkspace files via user/agent tools

Network endpoints3

registry.npmjs.org/localhost:5176127.0.0.1:5176

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with high false-positive risk.

Evidence for block

server/tools/index.mjs implements write_file/edit_file/run_command primitives
server/update-supervisor.mjs can run npm install -g during user-triggered update
server/index.mjs defaults to 0.0.0.0 with LAN sharing enabled

Evidence against

package.json has no lifecycle scripts; main/bin are only import or user CLI entrypoints
bin/quickforge.mjs starts/stops server and checks registry only on CLI commands
server/index.mjs gates remote non-share API behind LAN token and terminal is localhost-only
server/tools/index.mjs confines file tools to workspace and excludes sensitive files from grep
server/routes/tools.mjs requires full-access setting for direct write/run/plugin tools
network use is update checks, localhost health, user-configured model/MCP providers

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 91 file(s), 4.80 MB of source, external domains: 127.0.0.1, aiplatform.googleapis.com, api.anthropic.com, api.deepseek.com, api.mistral.ai, api.openai.com, bit.ly, cdn.jsdelivr.net, docs.anthropic.com, docs.expo.dev, docs.mistral.ai, dummy.com, example.com, generativelanguage.googleapis.com, github.com, help.openai.com, json-schema.org, ns.adobe.com, open.bigmodel.cn, platform.claude.com, react.dev, registry.npmjs.org, rolldown.rs, www.w3.org, www.xfa.org

Oversized source lightweight scan

dist/assets/pi-web-ui-CBet4bMl.js2.70 MB file, sampled 256 KB

ChildProcessHighEntropyStringsUrlStringsbit.lywww.w3.org

Source & flagged code

7 flagged

bin/quickforge.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from 'node:child_process'

3import { promises as fs } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/quickforge.mjsView on unpkg · L1

4import path from 'node:path'

5import os from 'node:os'

6import { fileURLToPath } from 'node:url'

8const __filename = fileURLToPath(import.meta.url)

9const __dirname = path.dirname(__filename)

11const serverScript = path.resolve(__dirname, '..', 'server', 'index.mjs')

12const packageJsonPath = path.resolve(__dirname, '..', 'package.json')

14async function getPackageInfo() {

15 try {

16 const text = await fs.readFile(packageJsonPath, 'utf8')

17 const pkg = JSON.parse(text)

18 return {

19 name: pkg.name || 'quickforge',

20 version: pkg.version || '0.0.0',

21 }

Lines 597-637javascript

597 const idx = args.indexOf('--level')

598 if (idx >= 0 && args[idx + 1]) return args[idx + 1].toUpperCase()

599 return null

600 })()

601

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView file

24* pdfjsBuild = 2cc809ade L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[.001,0,0,.001,0,0],... L26: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

server/update-supervisor.mjsView file

Lines 69-109javascript

69 await sleep(100)

70 }

72 if (isProcessRunning(oldPid)) {

73 log(`Old QuickForge process ${oldPid} is still running after timeout; continuing with npm install.`)

74 } else {

75 log('Old QuickForge process has exited.'

dist/assets/pi-web-ui-CBet4bMl.jsView file

•path = dist/assets/pi-web-ui-CBet4bMl.js kind = oversized_source_file sizeBytes = 2826873 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/pi-web-ui-CBet4bMl.jsView on unpkg

dist/assets/index-DiaCCmXE.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @shawnstack/quickforge@1.5.4 matchedIdentity = npm:QHNoYXduc3RhY2svcXVpY2tmb3JnZQ:1.5.4 similarity = 0.956 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/assets/index-DiaCCmXE.jsView on unpkg

Source & flagged code

7 flagged · loading source

bin/quickforge.mjsView file

1#!/usr/bin/env node L2: import { spawn } from 'node:child_process' L3: import { promises as fs } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/quickforge.mjsView on unpkg · L1

617const tailCmd = process.platform === 'win32' L618: ? `powershell.exe -NoProfile -Command "Get-Content -Path '${escapedLogFile}' -Wait -Tail 80"` L619: : `tail -n 80 -f '${escapedLogFile}'`

High

Shell

Package source references shell execution.

bin/quickforge.mjsView on unpkg · L617

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

server/update-supervisor.mjsView file

89if (installResult.code !== 0) { L90: log(`npm install failed. code=${installResult.code} signal=${installResult.signal || ''}`) L91: process.exitCode = installResult.code || 1 ... L96: log(`Starting QuickForge server: ${process.execPath} ${[serverScript, ...serverArgs].join(' ')}`) L97: const child = spawn(process.execPath, [serverScript, ...serverArgs], { L98: cwd: serverCwd || undefined,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

server/update-supervisor.mjsView on unpkg · L89

dist/assets/pi-web-ui-CBet4bMl.jsView file

•path = dist/assets/pi-web-ui-CBet4bMl.js kind = oversized_source_file sizeBytes = 2826873 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/pi-web-ui-CBet4bMl.jsView on unpkg

dist/assets/index-DiaCCmXE.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/assets/index-DiaCCmXE.jsView on unpkg

Findings

1 Critical4 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/assets/index-DiaCCmXE.js

HighChild Processbin/quickforge.mjs

HighShellbin/quickforge.mjs

HighRuntime Package Installserver/update-supervisor.mjs

HighOversized Source Filedist/assets/pi-web-ui-CBet4bMl.js

MediumDynamic Requiredist/assets/pdf.worker.min-Cpi8b8z3.mjs

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowEvaldist/assets/pdf.worker.min-Cpi8b8z3.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

bin/quickforge.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from 'node:child_process'

3import { promises as fs } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/quickforge.mjsView on unpkg · L1

4import path from 'node:path'

5import os from 'node:os'

6import { fileURLToPath } from 'node:url'

8const __filename = fileURLToPath(import.meta.url)

9const __dirname = path.dirname(__filename)

11const serverScript = path.resolve(__dirname, '..', 'server', 'index.mjs')

12const packageJsonPath = path.resolve(__dirname, '..', 'package.json')

14async function getPackageInfo() {

15 try {

16 const text = await fs.readFile(packageJsonPath, 'utf8')

17 const pkg = JSON.parse(text)

18 return {

19 name: pkg.name || 'quickforge',

20 version: pkg.version || '0.0.0',

21 }

Lines 597-637javascript

597 const idx = args.indexOf('--level')

598 if (idx >= 0 && args[idx + 1]) return args[idx + 1].toUpperCase()

599 return null

600 })()

601

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

server/update-supervisor.mjsView file

Lines 69-109javascript

69 await sleep(100)

70 }

72 if (isProcessRunning(oldPid)) {

73 log(`Old QuickForge process ${oldPid} is still running after timeout; continuing with npm install.`)

74 } else {

75 log('Old QuickForge process has exited.'

dist/assets/pi-web-ui-CBet4bMl.jsView file

•path = dist/assets/pi-web-ui-CBet4bMl.js kind = oversized_source_file sizeBytes = 2826873 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/pi-web-ui-CBet4bMl.jsView on unpkg

dist/assets/index-DiaCCmXE.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/assets/index-DiaCCmXE.jsView on unpkg