Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@task-handoff/controlled-instance@0.0.6: Clean npm security | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Passed — safe to install

No malicious behavior detected. 13 low-signal pattern(s) reviewed.

View on npm All versions

registry / @task-handoff/controlled-instance / 0.0.6

@task-handoff/controlled-instance@0.0.6

Prebuilt TaskHandoff controlled instance runtime.

AI Security Review

scanned 17h ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. This is an explicit CLI-launched local controller that manages task-handoff sessions, local agent processes, and scoped configuration synchronization.

Static reason

No blocking static signals were detected.

Trigger

User runs `task-handoff-controlled-instance web` or accesses its local runtime API.

Impact

Powerful but package-aligned local management capability; no install-time mutation, credential exfiltration, remote payload execution, or stealth persistence was found.

Mechanism

Local Fastify/WebSocket controller for managed Codex/Claude and terminal sessions.

Rationale

Source inspection shows a compiled, explicit-use TaskHandoff controller with expected local process and config-management behavior. No concrete malicious chain or unconsented install-time AI-agent control-surface mutation was found.

Evidence

package.jsonbin/task-handoff-controlled-instancedist/controlled-instance-cli.jsREADME.md

Network endpoints3

localhosttask-handoff.localws://localhost/rpc

Decision evidence

public snapshot

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for block

`dist/controlled-instance-cli.js` can launch Codex/Claude processes and provides config-sync APIs.
The runtime can import/export `.codex` and `.claude` configuration through its local controller.

Evidence against

`package.json` has no preinstall/install/postinstall lifecycle scripts.
`bin/task-handoff-controlled-instance` only loads the CLI after an explicit user command.
`dist/controlled-instance-cli.js` restricts config-sync targets to approved home/workspace/data/log/artifact roots.
Observed runtime endpoints are localhost/task-handoff local control URLs; no third-party exfiltration host was found.
Cleanup calls remove session directories and local Unix sockets, not unrelated user data.
Font blobs in `ui/assets/` are bundled UI assets, not executable payloads.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 67 file(s), 4.79 MB of source, external domains: chevrotain.io, en.wikipedia.org, github.com, json-schema.org, langium.org, www.w3.org

Source & flagged code

3 flagged · loading source

ui/assets/index-DL6765N4.jsView file

2[process exited]`)):z.type==="error"&&(s.value="error",a?.writeln(`\r L3: [error] ${z.message}`))}),o.addEventListener("close",()=>{s.value=s.value==="exited"?"exited":"disconnected"}),o.addEventListener("error",()=>{s.value="error"}),a.onData($=>{o?.rea... L4: https://github.com/highlightjs/highlight.js/issues/2277`),Gt=le,vt=Me),et===void 0&&(et=!0);const $n={code:vt,language:Gt};Ua("before:highlight",$n);const Er=$n.result?$n.result:Ys...

High

Child Process

Package source references child process execution.

ui/assets/index-DL6765N4.jsView on unpkg · L2

dist/controlled-instance-cli.jsView file

1"use strict";var e=require("commander"),t=require("node:fs"),s=require("node:path"),n=require("node:crypto"),i=require("node:net"),r=require("node:os"),o=require("node:stream"),a=r...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/controlled-instance-cli.jsView on unpkg · L1

ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg

Findings

4 High4 Medium5 Low

HighChild Processui/assets/index-DL6765N4.js

HighShell

HighSame File Env Network Executiondist/controlled-instance-cli.js

HighShips High Entropy Blobui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumStructural Risk Force Deep Review

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

90%Pass

Verdict confidence

IntentBenign

False-positive riskLow

Review stagesource_first_review

Firewall policyNo policy match

Package metadata

npm

Maintainersedgestorage

Version0.0.6

PublishedJul 18, 2026

LicenseApache-2.0

Dependencies11

Integrityverified

Package size2.14 MB

Files134

Runtime surface

package.json

Entrypointsbin → task-handoff-controlled-instance

Runtimenode >=22.22.2

Artifact5.98 MB · 134 files1 signature(s)

Install lifecycleNo scripts declared.

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocketHighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStringsManifest: clean

LPM CLI

Source & flagged code

3 flagged

ui/assets/index-DL6765N4.jsView file

2[process exited]`)):z.type==="error"&&(s.value="error",a?.writeln(`\r L3: [error] ${z.message}`))}),o.addEventListener("close",()=>{s.value=s.value==="exited"?"exited":"disconnected"}),o.addEventListener("error",()=>{s.value="error"}),a.onData($=>{o?.rea... L4: https://github.com/highlightjs/highlight.js/issues/2277`),Gt=le,vt=Me),et===void 0&&(et=!0);const $n={code:vt,language:Gt};Ua("before:highlight",$n);const Er=$n.result?$n.result:Ys...

High

Child Process

Package source references child process execution.

ui/assets/index-DL6765N4.jsView on unpkg · L2

dist/controlled-instance-cli.jsView file

Lines 1-2javascript

1"use strict";var e=require("commander"),t=require("node:fs"),s=require("node:path"),n=require("node:crypto"),i=require("node:net"),r=require("node:os"),o=require("node:stream"),a=require("node:stream/promises"),c=require("@fastify/static"),d=require("@fastify/websocket"),p=require("fastify"),u=require("httpxy"),l=require("zod"),m=require("node:child_process"),h=require("write-file-atomic"),g=require("node:events"),f=require("node-pty"),y=require("ws"),v=require("@iarna/toml");const S=/(TOKEN|KEY|SECRET|AUTH|PASSWORD|COOKIE)/i,A=/^(TASK_HANDOFF|CODEX|CLAUDE|PWD$|OLDPWD$|SHELL$|TERM$)/;function ...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/controlled-instance-cli.jsView on unpkg · L1

2

Long lines were clipped for display.

ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View file

•path = ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2 kind = high_entropy_blob sizeBytes = 9644 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

ui/assets/KaTeX_Script-Regular-D3wIWfF6.woff2View on unpkg