registry / @telora/daemon / 0.22.4
@telora/daemon@0.22.4
Agent orchestration daemon for Telora - spawns and manages Claude Code instances
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe source establishes a default-off, operator-configured sidecar installation and execution capability, which warrants a warning for its residual extension lifecycle risk. The package manifest has no install lifecycle hook, and the inspected runtime receiver is ordinary promise cleanup.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Daemon startup when Lacuna is enabled and its virtual environment is missing.
Impact
The configured source code runs with the daemon user's privileges.
Mechanism
The supervisor resolves the configured source, creates a Python virtual environment, installs the checkout with pip, then launches the sidecar.
AI rationale
The source establishes a default-off, operator-configured sidecar installation and execution capability, which warrants a warning for its residual extension lifecycle risk. The package manifest has no install lifecycle hook, and the inspected runtime receiver is ordinary promise cleanup.
Evidence
dist/backends/lacuna/supervisor.jsdist/backends/lacuna/launch-adapter.jsdist/backends/lacuna/lifecycle.jsdist/shell/config.jsdist/shell/unified-shell.js
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Daemon startup starts the Lacuna sidecar only when enabled; its source comes from operator configuration and can be a Git URL or local path.
- If the sidecar environment is missing, the supervisor runs an install plan that creates a Python virtual environment and installs from the configured checkout.
- The unresolved lifecycle receiver is a promise .finally() that resolves the merge result; it does not perform an account action.
- The package has no preinstall, install, or postinstall hook; its prepublishOnly script builds and stamps build information.
- The connect and IDE integration excerpts describe Telora configuration and MCP registration, while the audit hook excerpt describes a write-deny overlay.
Evidence against
- The sidecar is opt-in, and failed startup is handled without preventing the daemon from running.
- The reviewed configuration selects the Lacuna source from environment or config values rather than a publisher-selected source.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
6 flagged · loading sourcedist/update/self-update.jsView file
25*/
L26: import { execFileSync, execFile } from 'node:child_process';
L27: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Child Process
Package source references child process execution.
dist/update/self-update.jsView on unpkg · L2516* Three installation modes:
L17: * - **npm**: Installed globally via `npm install -g @telora/daemon`.
L18: * Updates via `npm install -g @telora/daemon@latest`.
...
L25: */
L26: import { execFileSync, execFile } from 'node:child_process';
L27: import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync } from 'node:fs';
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/update/self-update.jsView on unpkg · L16dist/verify/verification-baseline.jsView file
116}
L117: /** Spawn `sh -c command` in cwd and capture the FULL combined stdout+stderr. */
L118: function runShellCapture(command, cwd, timeoutMs) {
Findings
1 Critical4 High4 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/backends/lacuna/supervisor.js
HighChild Processdist/update/self-update.js
HighShelldist/verify/verification-baseline.js
HighRuntime Package Installdist/update/self-update.js
HighSemantic Analysis Limitedbuild-info.json
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/telora-daemon-wrapper.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @telora/daemon@0.22.4.
See all versions of @telora/daemon for other recorded verdicts.
- Review the evidence and your use of @telora/daemon@0.22.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.