registry / @task-handoff/controlled-instance / 0.0.3

@task-handoff/controlled-instance@0.0.3

Prebuilt TaskHandoff controlled instance runtime.

AI Security Review

scanned 8h ago · by lpm-firewall-ai

An explicitly started receiver can bridge configured chat accounts to local AI-agent and terminal sessions. This creates remote command capability if the configured chat account or allowed sender is compromised; no install-time attack behavior is present.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `task-handoff-controlled-instance receiver` or starts the web server with receiver auto-start.

Impact

Authorized or compromised chat control can cause actions in the configured local workspace.

Mechanism

Configured chat-to-agent bridge launching local PTY and agent processes.

Rationale

This is an explicit, package-aligned remote agent-control runtime rather than an install-time malware chain. Its powerful chat-to-local-process bridge is a dangerous dual-use capability and merits a warning.

Evidence

package.jsonbin/task-handoff-controlled-instancedist/controlled-instance-cli.jsdist/receiver-ink.mjs~/.config/task-handoff/config.json

Network endpoints2

api.dingtalk.comilinkai.weixin.qq.com

Decision evidence

public snapshot

@task-handoff/controlled-instance@0.0.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code