registry / @slopus/rig / 0.2.18

@slopus/rig@0.2.18

Opinionated coding-agent harness with strong defaults for provider-aligned workflows.

AI Security Review

scanned 11h ago · by lpm-firewall-ai

The package is a user-invoked coding-agent CLI. Its Happy integration can use a configured service and credentials only during runtime; no install-time attack surface was found.

Static reason

No blocking static signals were detected.

Trigger

User runs the rig CLI or its daemon/auth commands.

Impact

Expected runtime access to its own configuration and authenticated service; no confirmed malicious behavior.

Mechanism

CLI/daemon agent harness with optional Happy integration.

Rationale

Direct inspection found a bundled, user-invoked agent CLI with optional authenticated service integration, but no lifecycle hook or concrete malicious chain. Dynamic require in the worklet bundle is bundled loader behavior, not evidence of payload execution.

Evidence

package.jsondist/main.jsdist/worklet-bootstrap.js

Network endpoints1

api.cluster-fluster.com

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with medium false-positive risk.

Evidence for block

Manifest exposes a user-invoked CLI binary.

Runtime supports Happy authentication against a configured service.

Daemon startup can import Happy credentials for its own integration.

Evidence against

package.json has no preinstall, install, or postinstall hook.
Network and credential behavior is tied to documented CLI/daemon functionality, not installation or import.
No credential exfiltration, remote payload execution, destructive action, or foreign agent-control-surface mutation found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 37 file(s), 992 KB of source, external domains: happy-plugin.test

Oversized source lightweight scan

dist/main.js13.1 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsCryptoShellHighEntropyStrings

dist/worklet-bootstrap.js2.28 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsDynamicRequireHighEntropyStrings

Source & flagged code

4 flagged

dist/worklet-bootstrap.jsView file

1import { createRequire as createBundleRequire } from "node:module"; const require = createBundleRequire(import.meta.url); L2: var __create = Object.create;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/worklet-bootstrap.jsView on unpkg · L1

dist/main.jsView file

•path = dist/main.js kind = oversized_source_file sizeBytes = 13715253 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/main.jsView on unpkg

•path = dist/main.js kind = oversized_cli_entrypoint sizeBytes = 13715253 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/main.jsView on unpkg

package.jsonView file

Lines 1-35json

1{

2 "name": "@slopus/rig",

3 "version": "0.2.18",

4 "description": "Opinionated coding-agent harness with strong defaults for provider-aligned workflows.",

5 "keywords": [

6 "agent-harness"

Source & flagged code

4 flagged · loading source

dist/worklet-bootstrap.jsView file

1import { createRequire as createBundleRequire } from "node:module"; const require = createBundleRequire(import.meta.url); L2: var __create = Object.create;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/worklet-bootstrap.jsView on unpkg · L1

dist/main.jsView file

•path = dist/main.js kind = oversized_source_file sizeBytes = 13715253 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/main.jsView on unpkg

•path = dist/main.js kind = oversized_cli_entrypoint sizeBytes = 13715253 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/main.jsView on unpkg

Findings

6 Medium5 Low

MediumDynamic Requiredist/worklet-bootstrap.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Source Filedist/main.js

MediumOversized Cli Entrypointdist/main.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowAi Review Evidencepackage.json

LPM CLI

package.jsonView file

15"bin": { "rig": "./dist/main.js" }

Low

Ai Review Evidence

Manifest exposes a user-invoked CLI binary.

package.jsonView on unpkg · L15

Artifact

17.0 MB · 541 files1 signature(s) · provenance

Install lifecycleNo install hooks · other: build, check, dev, start +3

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

4 flagged

dist/worklet-bootstrap.jsView file

1import { createRequire as createBundleRequire } from "node:module"; const require = createBundleRequire(import.meta.url); L2: var __create = Object.create;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/worklet-bootstrap.jsView on unpkg · L1

dist/main.jsView file

•path = dist/main.js kind = oversized_source_file sizeBytes = 13715253 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

dist/main.jsView on unpkg

•path = dist/main.js kind = oversized_cli_entrypoint sizeBytes = 13715253 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/main.jsView on unpkg

package.jsonView file

Lines 1-35json

1{

2 "name": "@slopus/rig",

3 "version": "0.2.18",

4 "description": "Opinionated coding-agent harness with strong defaults for provider-aligned workflows.",

5 "keywords": [

6 "agent-harness"

,

7 "coding-agent",

8 "pi"

9 ],

10 "license": "MIT",

11 "repository": {

12 "type": "git",

13 "url": "git+https://github.com/slopus/rig.git"

14 },

15 "bin": {

16 "rig": "./dist/main.js"

17 },

Low

Ai Review Evidence

Manifest exposes a user-invoked CLI binary.

package.jsonView on unpkg · L15

18 "files": [

19 "dist",

20 "LICENSE-CODEX",

21 "LICENSE-HAPPY",

22 "LICENSE-GROK-BUILD",

23 "THIRD-PARTY-NOTICES.md"

24 ],

25 "type": "module",

26 "exports": {

27 "./types": {

28 "types": "./dist/types.d.ts"

29 },

30 "./package-version": {

31 "types": "./dist/readPackageVersion.d.ts",

32 "import": "./dist/readPackageVersion.js",

33 "default": "./dist/readPackageVersion.js"

34 },

35 "./dist/main.js": "./dist/main.js",