registry / @smooai/smooth-operator-core / 0.10.1

@smooai/smooth-operator-core@0.10.1

Native TypeScript implementation of the smooth-operator agent engine — an in-process, OpenAI-compatible agentic tool-calling loop with knowledge grounding. The TypeScript sibling of the Rust reference engine, the C# core, and the Python core.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The optional extension host can discover local extension manifests and spawn their declared commands. It is not activated by package installation or the main import, but consumers that use the extension API can load code from global or trusted project extension directories.

Static reason

No blocking static signals were detected.

Trigger

Explicit consumer use of the `@smooai/smooth-operator-core/extension` discovery and host-loading APIs.

Impact

A pre-existing local extension manifest can cause its configured command to run and can retain extension state; no package-bundled payload or automatic activation was found.

Mechanism

Manifest-driven local extension subprocess execution with inherited environment.

Rationale

No install-time, import-time, exfiltration, remote-payload, or destructive behavior is present. The optional manifest-driven extension loader is a meaningful local code-execution capability and warrants a warning under the extension lifecycle policy.

Evidence

package.jsondist/index.jsdist/extension/manifest.jsdist/extension/process.jsdist/extension/host.jsREADME.md

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

@smooai/smooth-operator-core@0.10.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code