registry / @telora/daemon / 0.21.192
@telora/daemon@0.21.192
Agent orchestration daemon for Telora - spawns and manages Claude Code instances
AI Security Review
scanned 3d ago · by lpm-firewall-aiSource inspection found no install-time package hook or concrete attack behavior. The flagged runtime operations are consistent with the daemon’s connect, verification, update, and sidecar functions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The connect command, runtime update flow, verification run, or configured sidecar startup activates these operations.
Impact
No confirmed unauthorized credential transfer, destructive behavior, or control-surface abuse was established.
Mechanism
The package writes Telora client configuration, runs configured processes, and installs the Lacuna sidecar into a virtual environment.
AI rationale
Source inspection found no install-time package hook or concrete attack behavior. The flagged runtime operations are consistent with the daemon’s connect, verification, update, and sidecar functions.
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a prepublishOnly build and stamping command; it has no preinstall, install, or postinstall hook.
- The connect flow redeems a Telora token and writes daemon and agent-client configuration as part of an explicit CLI command.
- The audit hook writes a Claude settings overlay that denies write operations for read-only audit agents.
- The Lacuna supervisor installs a configured sidecar into a virtual environment and launches it as a local process.
- The self-update code performs a global package update in its runtime update flow; the verification shell helper runs a configured command in a worktree.
- Inspected daemon files cover agent spawning, session handling, scanning, worktree management, and backend operations; no concrete attack behavior was identified.
Evidence against
- Static hints flag network calls, child processes, shell execution, and a newly added supervisor, but inspected source ties these to connect, verification, updating, and sidecar management.
- Agent configuration writers modify Claude, Codex, Cline, and IDE settings during connect or harness setup; inspected excerpts show Telora registration and configuration merging.
Source & flagged code
6 flagged · loading sourcedist/update/self-update.jsView file
25*/
L26: import { execFileSync, execFile } from 'node:child_process';
L27: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/update/self-update.jsView on unpkg · L2516* Three installation modes:
L17: * - **npm**: Installed globally via `npm install -g @telora/daemon`.
L18: * Updates via `npm install -g @telora/daemon@latest`.
...
L25: */
L26: import { execFileSync, execFile } from 'node:child_process';
L27: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/update/self-update.jsView on unpkg · L16dist/verify/verification-baseline.jsView file
109}
L110: /** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr. */
L111: function runShellCapture(command, cwd, timeoutMs) {
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/backends/lacuna/supervisor.js
HighChild Processdist/update/self-update.js
HighShelldist/verify/verification-baseline.js
HighRuntime Package Installdist/update/self-update.js
HighSemantic Analysis Limitedbuild-info.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/telora-daemon-wrapper.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @telora/daemon@0.21.192.
See all versions of @telora/daemon for other recorded verdicts.
- Review the evidence and your use of @telora/daemon@0.21.192 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.