registry / @telora/daemon / 0.21.191
@telora/daemon@0.21.191
Agent orchestration daemon for Telora - spawns and manages Claude Code instances
AI Security Review
scanned 3d ago · by lpm-firewall-aiSource review did not substantiate the scanner’s malicious verdict: there is no npm install hook, and the flagged update and verification behavior belongs to runtime operations. The enabled sidecar’s runtime source installation remains a guarded extension lifecycle risk, so a warning is appropriate.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Daemon startup with Lacuna enabled and its sidecar virtual environment absent.
Impact
The installed sidecar code executes as a local process; inspected source does not establish unauthorized data access or another attack.
Mechanism
The supervisor runs an install plan that can clone the configured source and install it into the sidecar virtual environment.
AI rationale
Source review did not substantiate the scanner’s malicious verdict: there is no npm install hook, and the flagged update and verification behavior belongs to runtime operations. The enabled sidecar’s runtime source installation remains a guarded extension lifecycle risk, so a warning is appropriate.
Evidence
dist/shell/unified-shell.jsdist/backends/lacuna/lifecycle.jsdist/backends/lacuna/supervisor.jsdist/backends/lacuna/launch-adapter.js
Decision evidence
public snapshotAI called this Suspicious at 81.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package has no npm install lifecycle hook; its listed publish hook runs build and build-info stamping.
- The sidecar starts only when enabled in daemon configuration, and startup failure leaves agents routing directly.
- When the sidecar source is missing, runtime setup can clone the configured source and install it into a Python virtual environment.
- The Lacuna installation flow and its activation are guarded runtime setup; inspected source does not establish a concrete attack.
Evidence against
- Self-update installs the package only in its update flow; the inspected code does not show an automatic install-hook trigger.
- The flagged spawn operation handles a requested merge-resolution agent and records its success or failure.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/update/self-update.jsView file
25*/
L26: import { execFileSync, execFile } from 'node:child_process';
L27: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/update/self-update.jsView on unpkg · L2516* Three installation modes:
L17: * - **npm**: Installed globally via `npm install -g @telora/daemon`.
L18: * Updates via `npm install -g @telora/daemon@latest`.
...
L25: */
L26: import { execFileSync, execFile } from 'node:child_process';
L27: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/update/self-update.jsView on unpkg · L16dist/verify/verification-baseline.jsView file
109}
L110: /** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr. */
L111: function runShellCapture(command, cwd, timeoutMs) {
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/backends/lacuna/supervisor.js
HighChild Processdist/update/self-update.js
HighShelldist/verify/verification-baseline.js
HighRuntime Package Installdist/update/self-update.js
HighSemantic Analysis Limitedbuild-info.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/telora-daemon-wrapper.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @telora/daemon@0.21.191.
See all versions of @telora/daemon for other recorded verdicts.
- Review the evidence and your use of @telora/daemon@0.21.191 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.