Loading npm security reports…

@tonyclaw/agent-inspector: Suspicious npm security report (Warn) | LPM Firewall

registry / @tonyclaw/agent-inspector / 4.0.40

@tonyclaw/agent-inspector@4.0.40

Agent observability and knowledge capture layer for AI coding tools.

AI Security Review

scanned 12h ago · by lpm-firewall-ai

No confirmed attack surface was identified in the inspected behavior. The agent-related excerpts show detection and platform metadata, while the inspected network request is loopback-only.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the CLI performs local agent detection and local health checks; npm postinstall invokes native-backend reconciliation.

Impact

The inspected behavior does not establish credential exfiltration or unconsented mutation of an agent configuration surface.

Mechanism

The reconciler checks the installed optional backend version and, if it differs, invokes npm to install the matching package version with lifecycle scripts disabled.

AI rationale

Source inspection found agent discovery metadata, loopback health checks, and a narrowly targeted native backend reconciliation. These excerpts do not support the scanner's command-output exfiltration claim or establish malicious behavior.

Evidence

package.json.output/cli.js.output/server/_ssr/router-zFIFa6Tt.mjsscripts/reconcile-native-backend.mjs

Decision evidence

public snapshot

AI called this Clean at 82.0% confidence as Benign with low false-positive risk.

Why the final policy warns

The AI recommended clean. Static policy retained a warning. The static scanner classified the package as malicious with confidence of at least 85%. A critical static finding has confidence of at least 90%. These conditions do not mean that the AI confirmed malicious behavior.

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/setup-windows-runtime.mjs && node scripts/setup-agent-skills.mjs && node scripts/reconcile-native-backend.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/setup-windows-runtime.mjs && node scripts/setup-agent-skills.mjs && node scripts/reconcile-native-backend.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/reconcile-native-backend.mjsView file

17import { dirname, join } from "node:path"; L18: import { spawnSync } from "node:child_process"; L19: import { fileURLToPath } from "node:url";

High

Child Process

Package source references child process execution.

scripts/reconcile-native-backend.mjsView on unpkg · L17

.output/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tonyclaw/agent-inspector@4.0.32 matchedIdentity = npm:[redacted]:4.0.32 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

.output/cli.jsView on unpkg

65L66: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let s=a[1];if(t===a[0]){i(a);continue}if(e.external){let l=e.exter... L67: `))}catch{return[]}}function rm(e,t=process.platform){if(!Number.isInteger(e)||e<=0)return!1;try{if(t==="win32")try{return Pa($b("taskkill.exe"),["/PID",String(e),"/T","/F"],{encod...

High

Shell

Package source references shell execution.

.output/cli.jsView on unpkg · L65

65L66: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let s=a[1];if(t===a[0]){i(a);continue}if(e.external){let l=e.exter... L67: `))}catch{return[]}}function rm(e,t=process.platform){if(!Number.isInteger(e)||e<=0)return!1;try{if(t==="win32")try{return Pa($b("taskkill.exe"),["/PID",String(e),"/T","/F"],{encod...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

.output/cli.jsView on unpkg · L65

Source & flagged code

8 flagged

package.jsonView file

Lines 89-129json

89 "compatibility:freeze": "node scripts/freeze-backend-baseline.mjs",

90 "compatibility:run": "node scripts/compatibility/cli.mjs run",

91 "compatibility:performance": "node scripts/compatibility/performance-cli.mjs",

92 "compatibility:performance:verify": "node scripts/compatibility/performance-cli.mjs verify",

93 "build:cli": "npx esbuild src/cli.ts --bundle --minify --legal-comments=none --platform=node --target=node22 --format=esm --outfile=.output/cli.js",

94 "build:mcp": "npx esbuild packages/agent-inspector-mcp/src/cli.ts --bundle --minify --legal-comments=none --platform=node --target=node22 --format=esm --outfile=packages/agent-inspector-mcp/dist/cli.js",

95 "rust:build-package": "node scripts/rust/build-platform.mjs",

96 "rust:stage-package": "node scripts/rust/stage-platform.mjs",

97 "rust:verify-package": "node scripts/rust/verify-platform.mjs",

98 "rust:pack-package": "node scripts/rust/pack-platform.mjs",

99 "rust:native-artifact": "node scripts/rust/create-native-artifact.mjs",

100 "rust:native:aggregate": "node scripts/rust/aggregate-native-artifacts.mjs",

101 "rust:release-gate:preflight": "node scripts/rust/release-gate-preflight.mjs",

102 "rust:release-evidence:plan": "node scripts/rust/release-evidence-plan.mjs",

103 "commercial:release-gate:preflight": "node scripts/commercial-release-preflight.mjs",

104 "test:commercial-release-gate": "bun test scripts/commercialReleasePreflight.test.ts",

105 "test:rust-packaging": "bun test scripts/rust/npmPackaging.test.ts scripts/rust/nativeReleaseContract.test.ts scripts/rust/nativeStartupSmoke.test.ts scripts/rust/releaseGatePreflight.test.ts scripts/releaseCore.test.ts",

106 "rust:packages:check": "node scripts/rust/sync-package-versions.mjs",

107 "rust:packages:sync": "node scripts/rust/sync-package-versions.mjs --write",

108 "themes:generate": "node scripts/generate-theme-scales.mjs",

109 "postinstall": "node scripts/setup-windows-runtime.mjs && node scripts/setup-agent-skills.mjs && node scripts/reconcile-native-backend.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L109

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L109

110 "prepublishOnly": "node scripts/rust/require-release-orchestrator.mjs",

111 "typecheck": "tsc --noEmit --incremental --tsBuildInfoFile .cache/tsconfig.tsbuildinfo",

112 "lint": "eslint . --cache --cache-location .cache/eslintcache",

113 "format": "biome format --write .",

114 "format:check": "biome format .",

115 "verify:ultra": "node scripts/compatibility/ultra-gate.mjs",

116 "verify:ultra:fresh": "node scripts/compatibility/ultra-gate.mjs --no-cache",

117 "verify:ultra:smoke": "npm run verify:ultra && npm run test:smoke",

118 "verify:fast": "bun scripts/run-static-checks.mjs --format && bun test:changed",

119 "extension:zip": "node scripts/pack-chrome-extension.mjs",

120 "extension:release": "node scripts/release-chrome-extension.mjs",

121 "release": "node scripts/release.mjs",

122 "knip": "knip",

123 "check": "bun scripts/run-static-checks.mjs --format && bun check:boundaries && bun check:commercial-performance && bun check:hostile-inputs && bun compatibility:bdd && bun rust:packages:check",

124 "prepare": "husky",

125 "ladle": "ladle serve",

126 "ladle:build": "ladle build"

127 },

128 "dependencies": {

129 "@mariozechner/pi-agent-core": "^0.73.1",

scripts/reconcile-native-backend.mjsView file

Lines 1-37javascript

1#!/usr/bin/env node

2// Postinstall hook: reconciles the platform-specific Rust native backend

3// optionalDependency with the main package version.

4//

5// Background: `npm install <rootPkg>` (especially in --global mode) does not

6// always re-fetch matching versions of every optionalDependency that has a

7// native binary. When the optional native package lags behind the main

8// package, `agent-inspector start` silently falls back to the portable

9// TypeScript backend. This script detects that drift and self-heals by

10

.output/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @tonyclaw/agent-inspector@4.0.32 matchedIdentity = npm:[redacted]:4.0.32 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

.output/cli.jsView on unpkg

65L66: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let s=a[1];if(t===a[0]){i(a);continue}if(e.external){let l=e.exter... L67: `))}catch{return[]}}function rm(e,t=process.platform){if(!Number.isInteger(e)||e<=0)return!1;try{if(t==="win32")try{return Pa($b("taskkill.exe"),["/PID",String(e),"/T","/F"],{encod...

High

Shell

Package source references shell execution.

.output/cli.jsView on unpkg · L65

65L66: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let s=a[1];if(t===a[0]){i(a);continue}if(e.external){let l=e.exter... L67: `))}catch{return[]}}function rm(e,t=process.platform){if(!Number.isInteger(e)||e<=0)return!1;try{if(t==="win32")try{return Pa($b("taskkill.exe"),["/PID",String(e),"/T","/F"],{encod...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

.output/cli.jsView on unpkg · L65