@twofive/snail-pi-web@0.9.19: AI-agent control-surface risk | LPM Firewall

Loading npm security reports…

@twofive/snail-pi-web@0.9.19: AI-agent control-surface risk | LPM Firewall

Source & flagged code

12 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-pi-subagents-stale-ctx.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

bin/pi-web.jsView file

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

High

Child Process

Package source references child process execution.

bin/pi-web.jsView on unpkg · L4

4// eslint-disable-next-line @typescript-eslint/no-require-imports L5: const { spawn } = require("child_process"); L6: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/pi-web.jsView on unpkg · L4

scripts/run-automation-smokes.tsView file

34stdio: "inherit", L35: shell: true, L36: env: process.env,

High

Shell

Package source references shell execution.

scripts/run-automation-smokes.tsView on unpkg · L34

lib/automation-extension-runtime.tsView file

17entry: string; L18: files: Record<string, string>; // relPath -> base64 L19: }; ... L62: } L63: return path.join(process.cwd(), "lib", "automation-extension-runtime.js"); L64: } ... L140: path.posix.join(rel, "index.ts"), L141: path.posix.join(rel, "package.json"), L142: ].filter((x): x is string => Boolean(x)); ... L429: getCommands: () => [], L430: exec: async () => ({ code: 0, stdout: "", stderr: "" }), L431: };

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/automation-extension-runtime.tsView on unpkg · L17

lib/automation-worker-runtime.cjsView file

56} L57: return import_path2.default.join(process.cwd(), "lib", "automation-extension-runtime.js"); L58: } ... L73: try { L74: bundle = JSON.parse(bundleBytes.toString("utf8")); L75: } catch (error) { ... L117: import_path2.default.posix.join(rel, "index.ts"), L118: import_path2.default.posix.join(rel, "package.json") L119: ].filter((x) => Boolean(x)); ... L335: getCommands: () => [], L336: exec: async () => ({ code: 0, stdout: "", stderr: "" }) L337: };

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

lib/automation-worker-runtime.cjsView on unpkg · L56

lib/automation-runner.tsView file

18Cross-file remote execution chain: lib/automation-runner.ts spawns lib/automation-worker-runtime.cjs; helper contains network access plus dynamic code execution. L18: } from "fs"; L19: import { fork, type ChildProcess } from "child_process"; L20: import { join, dirname, basename } from "path"; ... L165: for (const [index, art] of staged.entries()) { L166: const bundleBytes = Buffer.from(art.bundleBytesBase64, "base64"); L167: const loaded = [redacted](bundleBytes, art.bundleSha256); ... L471: /** L472: * Walk upward from start dirs looking for package.json that owns this app. L473: */ ... L476: try { L477: if (typeof __dirname !== "undefined") starts.push(__dirname); L478: } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

lib/automation-runner.tsView on unpkg · L18

scripts/run-automation-smokes.cjsView file

27console.log(`\n=== ${script} ===`); L28: const result = spawnSync("npx", ["--yes", "tsx@4.23.1", full], { L29: cwd: root,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/run-automation-smokes.cjsView on unpkg · L27

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 5428 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

•path = .next/server/app/favicon.ico.body kind = payload_in_excluded_dir sizeBytes = 22542 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/favicon.ico.bodyView on unpkg

lib/chatgpt-usage-refresh-scheduler.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 3

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/chatgpt-usage-refresh-scheduler.tsView on unpkg