registry / @shawnstack/quickforge / 1.5.6

@shawnstack/quickforge@1.5.6

AI chat application with Agent access modes for local workspace tools. React + Vite + Tailwind CSS frontend, local Node.js storage server.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs qf/quickforge, imports startQuickForge(), or uses the local web/API UI.

Impact

Dangerous dual-use capability if exposed or misused, but source inspection did not show unconsented persistence, credential exfiltration, or lifecycle control-surface hijack.

Mechanism

User-invoked local agent workspace server with shell/filesystem tools and optional LAN access

Rationale

Static inspection shows a powerful local AI workspace application, not an install-time malware package: dangerous primitives are aligned with the product and activated by CLI/API/UI actions. Residual risk remains because it exposes shell/file/terminal/agent-extension capabilities and defaults to LAN-oriented serving, so warn rather than block.

Evidence

package.jsonbin/quickforge.mjsserver/index.mjsserver/public-api.mjsserver/update-supervisor.mjsserver/tools/index.mjsserver/skills.mjsserver/plugins/registry.mjs~/.quickforge/quickforge.pid~/.quickforge/logs~/.quickforge/storage~/.quickforge/cacheworkspace files via user-invoked tools

Network endpoints3

registry.npmjs.org/127.0.0.1:5176/api/healthlocalhost:5176

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

server/tools/index.mjs exposes user-invoked workspace read/write/edit and shell command tools.
server/terminal/terminal-manager.mjs can spawn a local PTY shell when terminal support is enabled.
server/skills.mjs and server/agent-profile-files.mjs read agent skill/profile surfaces including ~/.claude and project .claude paths.
server/index.mjs defaults the service host to 0.0.0.0 with LAN sharing flow, though remote API is gated.

Evidence against

package.json has no npm lifecycle scripts, so no install-time execution was found.
bin/quickforge.mjs starts/stops the package's own server and writes only QuickForge pid/log state under ~/.quickforge.
server/update-supervisor.mjs runs npm install -g package@latest only via explicit update flow, not install/import time.
server/public-api.mjs spawns server/index.mjs with shell:false and probes local health only.
No credential harvesting or hardcoded exfiltration endpoint found in inspected source.
Bundled plugins are QuickForge-owned markdown skills/commands, not foreign agent config writes.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 94 file(s), 4.82 MB of source, external domains: 127.0.0.1, aiplatform.googleapis.com, api.anthropic.com, api.deepseek.com, api.mistral.ai, api.openai.com, bit.ly, cdn.jsdelivr.net, docs.anthropic.com, docs.expo.dev, docs.mistral.ai, dummy.com, example.com, generativelanguage.googleapis.com, github.com, help.openai.com, json-schema.org, ns.adobe.com, open.bigmodel.cn, platform.claude.com, react.dev, registry.npmjs.org, rolldown.rs, www.w3.org, www.xfa.org

Oversized source lightweight scan

dist/assets/pi-web-ui-DFNE2m5b.js2.70 MB file, sampled 256 KB

ChildProcessHighEntropyStringsUrlStringsbit.lywww.w3.org

Source & flagged code

7 flagged

bin/quickforge.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from 'node:child_process'

3import { promises as fs } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/quickforge.mjsView on unpkg · L1

4import path from 'node:path'

5import os from 'node:os'

6import { fileURLToPath } from 'node:url'

8const __filename = fileURLToPath(import.meta.url)

9const __dirname = path.dirname(__filename)

11const serverScript = path.resolve(__dirname, '..', 'server', 'index.mjs')

12const packageJsonPath = path.resolve(__dirname, '..', 'package.json')

14async function getPackageInfo() {

15 try {

16 const text = await fs.readFile(packageJsonPath, 'utf8')

17 const pkg = JSON.parse(text)

18 return {

19 name: pkg.name || 'quickforge',

20 version: pkg.version || '0.0.0',

21 }

Lines 597-637javascript

597 const idx = args.indexOf('--level')

598 if (idx >= 0 && args[idx + 1]) return args[idx + 1].toUpperCase()

599 return null

600 })()

601

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView file

24* pdfjsBuild = 2cc809ade L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[.001,0,0,.001,0,0],... L26: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

server/update-supervisor.mjsView file

Lines 69-109javascript

69 await sleep(100)

70 }

72 if (isProcessRunning(oldPid)) {

73 log(`Old QuickForge process ${oldPid} is still running after timeout; continuing with npm install.`)

74 } else {

75 log('Old QuickForge process has exited.'

dist/assets/pi-web-ui-DFNE2m5b.jsView file

•path = dist/assets/pi-web-ui-DFNE2m5b.js kind = oversized_source_file sizeBytes = 2826865 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/pi-web-ui-DFNE2m5b.jsView on unpkg

server/index.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @shawnstack/quickforge@1.5.5 matchedIdentity = npm:QHNoYXduc3RhY2svcXVpY2tmb3JnZQ:1.5.5 similarity = 0.868 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server/index.mjsView on unpkg

Source & flagged code

7 flagged · loading source

bin/quickforge.mjsView file

1#!/usr/bin/env node L2: import { spawn } from 'node:child_process' L3: import { promises as fs } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/quickforge.mjsView on unpkg · L1

617const tailCmd = process.platform === 'win32' L618: ? `powershell.exe -NoProfile -Command "Get-Content -Path '${escapedLogFile}' -Wait -Tail 80"` L619: : `tail -n 80 -f '${escapedLogFile}'`

High

Shell

Package source references shell execution.

bin/quickforge.mjsView on unpkg · L617

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

server/update-supervisor.mjsView file

89if (installResult.code !== 0) { L90: log(`npm install failed. code=${installResult.code} signal=${installResult.signal || ''}`) L91: process.exitCode = installResult.code || 1 ... L96: log(`Starting QuickForge server: ${process.execPath} ${[serverScript, ...serverArgs].join(' ')}`) L97: const child = spawn(process.execPath, [serverScript, ...serverArgs], { L98: cwd: serverCwd || undefined,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

server/update-supervisor.mjsView on unpkg · L89

dist/assets/pi-web-ui-DFNE2m5b.jsView file

•path = dist/assets/pi-web-ui-DFNE2m5b.js kind = oversized_source_file sizeBytes = 2826865 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/pi-web-ui-DFNE2m5b.jsView on unpkg

server/index.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server/index.mjsView on unpkg

Findings

1 Critical4 High5 Medium5 Low

CriticalPrevious Version Dangerous Deltaserver/index.mjs

HighChild Processbin/quickforge.mjs

HighShellbin/quickforge.mjs

HighRuntime Package Installserver/update-supervisor.mjs

HighOversized Source Filedist/assets/pi-web-ui-DFNE2m5b.js

MediumDynamic Requiredist/assets/pdf.worker.min-Cpi8b8z3.mjs

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowEvaldist/assets/pdf.worker.min-Cpi8b8z3.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

bin/quickforge.mjsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { spawn } from 'node:child_process'

3import { promises as fs } from 'node:fs'

High

Child Process

Package source references child process execution.

bin/quickforge.mjsView on unpkg · L1

4import path from 'node:path'

5import os from 'node:os'

6import { fileURLToPath } from 'node:url'

8const __filename = fileURLToPath(import.meta.url)

9const __dirname = path.dirname(__filename)

11const serverScript = path.resolve(__dirname, '..', 'server', 'index.mjs')

12const packageJsonPath = path.resolve(__dirname, '..', 'package.json')

14async function getPackageInfo() {

15 try {

16 const text = await fs.readFile(packageJsonPath, 'utf8')

17 const pkg = JSON.parse(text)

18 return {

19 name: pkg.name || 'quickforge',

20 version: pkg.version || '0.0.0',

21 }

Lines 597-637javascript

597 const idx = args.indexOf('--level')

598 if (idx >= 0 && args[idx + 1]) return args[idx + 1].toUpperCase()

599 return null

600 })()

601

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-Cpi8b8z3.mjsView on unpkg · L24

server/update-supervisor.mjsView file

Lines 69-109javascript

69 await sleep(100)

70 }

72 if (isProcessRunning(oldPid)) {

73 log(`Old QuickForge process ${oldPid} is still running after timeout; continuing with npm install.`)

74 } else {

75 log('Old QuickForge process has exited.'

dist/assets/pi-web-ui-DFNE2m5b.jsView file

•path = dist/assets/pi-web-ui-DFNE2m5b.js kind = oversized_source_file sizeBytes = 2826865 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/pi-web-ui-DFNE2m5b.jsView on unpkg

server/index.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

server/index.mjsView on unpkg