registry  /  @sift-wiki/conductor  /  0.1.0

@sift-wiki/conductor@0.1.0

Local Sift Conductor tracer-bullet CLI daemon.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
No blocking static signals were detected.
Trigger
User runs `sift-conductor pair` and `sift-conductor run` with configured adapters.
Impact
A trusted or compromised configured service can cause configured local tools to act in the selected workspace; child processes inherit the parent environment.
Mechanism
Remote job dispatch to user-configured local AI, process, or HTTP adapters.
Rationale
Source inspection found no concrete malware, install hook, stealth persistence, or unconsented foreign AI-agent control mutation. Its transparent but powerful remote job execution design leaves a meaningful dual-use risk.
Evidence
package.jsonREADME.mddist/config.jsdist/bridge/server.jsdist/bridge/handler.jsdist/runtime/process.jsdist/cli.jsdist/daemon.jsdist/adapters/codexAgent.jsdist/adapters/processAgent.jsdist/adapters/httpAgent.js
Network endpoints2
127.0.0.1api.sift.wiki

Decision evidence

public snapshot
AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
  • `dist/daemon.js` claims remote jobs and dispatches configured local adapters.
  • `dist/adapters/codexAgent.js` launches Codex with `workspace-write` for configured workspaces.
  • `dist/adapters/processAgent.js` supports arbitrary configured local commands.
  • `dist/adapters/httpAgent.js` posts job and wake data to a configured endpoint.
  • `dist/runtime/process.js` merges parent `process.env` into launched child processes.
Evidence against
  • `package.json` has no preinstall, install, or postinstall hook.
  • No eval, dynamic module loading, native loading, persistence, or AI-config writes found.
  • Codex/Claude execution requires explicit pairing and user-configured adapters/workspaces.
  • `dist/bridge/server.js` binds the scoped bridge to `127.0.0.1`; handler checks a run token.
  • `dist/config.js` stores its credential in a dedicated mode-0600 config file.
Behavioral surface
Source
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 53 file(s), 174 KB of source, external domains: 127.0.0.1, developers.openai.com, docs.anthropic.com, github.com

Source & flagged code

5 flagged · loading source
dist/daemon.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/daemon.js` claims remote jobs and dispatches configured local adapters.

dist/daemon.jsView on unpkg
dist/adapters/codexAgent.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/adapters/codexAgent.js` launches Codex with `workspace-write` for configured workspaces.

dist/adapters/codexAgent.jsView on unpkg
dist/adapters/processAgent.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/adapters/processAgent.js` supports arbitrary configured local commands.

dist/adapters/processAgent.jsView on unpkg
dist/adapters/httpAgent.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/adapters/httpAgent.js` posts job and wake data to a configured endpoint.

dist/adapters/httpAgent.jsView on unpkg
dist/runtime/process.jsView file
•Published source reference
Medium
Ai Review Evidence

`dist/runtime/process.js` merges parent `process.env` into launched child processes.

dist/runtime/process.jsView on unpkg

Findings

7 Medium4 Low
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencedist/daemon.js
MediumAi Review Evidencedist/adapters/codexAgent.js
MediumAi Review Evidencedist/adapters/processAgent.js
MediumAi Review Evidencedist/adapters/httpAgent.js
MediumAi Review Evidencedist/runtime/process.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings