registry / @telora/daemon / 0.22.136
@telora/daemon@0.22.136
⚠ Under reviewAgent orchestration daemon for Telora - spawns and manages Claude Code instances
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe manifest has no install-time lifecycle hook, and the inspected agent setup is first-party configuration. The source review did not cover enough of the package’s flagged runtime paths to resolve the overall verdict, so manual review is appropriate.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Daemon runtime actions or an operator invoking connect or audit setup commands.
Impact
No confirmed harmful effect; the broader runtime behavior remains unresolved.
Mechanism
Reviewed code uses package update and verification workflows and writes first-party agent configuration; the inspected audit overlay denies write actions.
AI rationale
The manifest has no install-time lifecycle hook, and the inspected agent setup is first-party configuration. The source review did not cover enough of the package’s flagged runtime paths to resolve the overall verdict, so manual review is appropriate.
Decision evidence
public snapshotAI called this Manual Review at 58.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The only manifest lifecycle hook is prepublishOnly, which runs build and build-info stamping.
- The connect flow sets up the daemon and agent integrations; inspected integration code describes first-party Telora MCP configuration and agent instruction files.
- The reviewed audit hook writes a Claude settings overlay that denies write actions.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcedist/update/self-update.jsView file
27*/
L28: import { execFileSync, execFile } from 'node:child_process';
L29: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/update/self-update.jsView on unpkg · L2717* Three installation modes:
L18: * - **npm**: Installed globally via `npm install -g @telora/daemon`.
L19: * Updates via `npm install -g --@telora:registry=<channel> @telora/daemon@latest`
...
L27: */
L28: import { execFileSync, execFile } from 'node:child_process';
L29: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/update/self-update.jsView on unpkg · L17dist/verify/verification-baseline-run.jsView file
333// ---------------------------------------------------------------------------
L334: /** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr and how it ended. */
L335: export function runShellCapture(command, cwd, timeoutMs) {
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/shell/unified-shell.js
HighChild Processdist/update/self-update.js
HighShelldist/verify/verification-baseline-run.js
HighRuntime Package Installdist/update/self-update.js
HighSemantic Analysis Limitedbuild-info.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/telora-daemon-wrapper.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @telora/daemon@0.22.136.
See all versions of @telora/daemon for other recorded verdicts.
- Review the evidence and your use of @telora/daemon@0.22.136 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.