registry / @telora/daemon / 0.21.169
@telora/daemon@0.21.169
Agent orchestration daemon for Telora - spawns and manages Claude Code instances
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest has no install-time lifecycle hook; prepublishOnly builds and stamps the package. Source review tied the flagged shell, update, and agent-configuration behavior to daemon operation, configured verification, or operator-invoked setup, with no concrete attack behavior found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The daemon runs, an operator invokes connect or update, or a configured verification command runs.
Impact
No confirmed unauthorized credential transfer, agent control change, persistence, or destructive behavior was established.
Mechanism
Runtime process and network operations support daemon work; connector configuration is written during setup, and verification runs its configured command in a worktree.
AI rationale
The manifest has no install-time lifecycle hook; prepublishOnly builds and stamps the package. Source review tied the flagged shell, update, and agent-configuration behavior to daemon operation, configured verification, or operator-invoked setup, with no concrete attack behavior found.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only a prepublishOnly build-and-stamp lifecycle script; the CLI entry is dist/index.js.
- The agent configuration writers register Telora integrations and keep credentials in daemon configuration; their behavior is reached through the explicit connect flow.
- The inspected runtime modules describe daemon spawning, verification, worktree management, scanning, and backend operations; no concrete attack behavior was identified.
- The update implementation installs a requested daemon version through its update path; no install hook triggers it.
- The verification baseline runs the configured verification command in a worktree to capture output.
Evidence against
- The package exposes network and process execution capabilities, including a configured shell command for verification and a runtime update path; inspected source ties these to daemon functions and user or product configuration.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flagged · loading sourcedist/update/self-update.jsView file
21*/
L22: import { execFileSync, execFile } from 'node:child_process';
L23: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/update/self-update.jsView on unpkg · L2112* Three installation modes:
L13: * - **npm**: Installed globally via `npm install -g @telora/daemon`.
L14: * Updates via `npm install -g @telora/daemon@latest`.
...
L21: */
L22: import { execFileSync, execFile } from 'node:child_process';
L23: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/update/self-update.jsView on unpkg · L12dist/verify/verification-baseline.jsView file
106}
L107: /** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr. */
L108: function runShellCapture(command, cwd, timeoutMs) {
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/shell/unified-shell.js
HighChild Processdist/update/self-update.js
HighShelldist/verify/verification-baseline.js
HighRuntime Package Installdist/update/self-update.js
HighSemantic Analysis Limitedbuild-info.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/telora-daemon-wrapper.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @telora/daemon@0.21.169.
See all versions of @telora/daemon for other recorded verdicts.
- Review the evidence and your use of @telora/daemon@0.21.169 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.