registry / @sym-bot/xmesh / 0.2.2

@sym-bot/xmesh@0.2.2

xMesh — decision and cognition generation for the agentic-native organization. Desktop server + web cockpit on the open @sym-bot substrate.

AI Security Review

scanned 18h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

An authenticated user invokes POST /api/workers or restores a prior worker roster.

Impact

A selected workspace can receive AGENTS.md/CLAUDE.md changes and agent-driven file/command activity; approved Codex work may use full access.

Mechanism

Workspace instruction-file projection and spawned Claude/Codex agent workers.

Rationale

The package intentionally provides authenticated, user-invoked agent-worker orchestration with mutable workspace instructions and potentially broad CLI execution. Its behavior warrants a warning, but the inspected source does not establish malicious or unconsented install-time behavior.

Evidence

package.jsonbin/xmesh.jsdist/server/index.jsdist/server/hosted-workers.jsdist/worker/commission-worker.jsAGENTS.mdCLAUDE.md~/.xmesh/workers.json

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence with false-positive risk.

as Dangerous Capability

low

Evidence for warning

dist/server/hosted-workers.js writes AGENTS.md and CLAUDE.md into a user-selected workspace.
The same module spawns persistent worker processes, including Claude/Codex modes.
dist/worker/commission-worker.js can run Codex with workspace write access and, after approval, danger-full-access.
dist/server/index.js exposes authenticated POST /api/workers to activate this behavior.

Evidence against

package.json has no preinstall, install, or postinstall hook.
bin/xmesh.js only starts the server after an explicit CLI invocation.
Worker creation is behind the local passcode/session authentication.
No credential harvesting or hard-coded external exfiltration endpoint was found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 68 file(s), 1005 KB of source, external domains: github.com, meshcognition.org, reactjs.org, www.w3.org

Source & flagged code

1 flagged

dist/server/commissions.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sym-bot/xmesh@0.2.1 matchedIdentity = npm:QHN5bS1ib3QveG1lc2g:0.2.1 similarity = 0.918 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/commissions.jsView on unpkg

Source & flagged code

1 flagged · loading source

dist/server/commissions.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sym-bot/xmesh@0.2.1 matchedIdentity = npm:QHN5bS1ib3QveG1lc2g:0.2.1 similarity = 0.918 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/commissions.jsView on unpkg

Findings

1 High2 Medium5 Low

HighPrevious Version Dangerous Deltadist/server/commissions.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

LPM CLI

EnvironmentVars

Filesystem

Network

Shell

HighEntropyStrings

Minified

UrlStrings

NoLicense

Source & flagged code

1 flagged

dist/server/commissions.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sym-bot/xmesh@0.2.1 matchedIdentity = npm:QHN5bS1ib3QveG1lc2g:0.2.1 similarity = 0.918 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/commissions.jsView on unpkg