@whalent/agent-core@0.3.462
Core runtime for Whalent Agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no install lifecycle trigger, so blocking is not supported. Its runtime configuration injection capability is a real AI-agent control-surface risk and is best treated as user-invoked capability abuse.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the MCP or CLI functionality and invokes its configuration-management behavior.
Impact
A user-invoked operation can alter an AI-agent MCP configuration; static inspection found no install-time activation.
Mechanism
The bundled routine creates a config.toml path and injects an MCP server entry.
AI rationale
The package has no install lifecycle trigger, so blocking is not supported. Its runtime configuration injection capability is a real AI-agent control-surface risk and is best treated as user-invoked capability abuse.
Evidence
dist/mcp.cjsconfig.toml
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a CLI but contains no npm lifecycle hook.
- The MCP bundle contains a routine that constructs a config.toml path and updates MCP-server configuration.
- MCP execution is gated by direct runtime invocation, rather than package installation.
Evidence against
- No preinstall, install, postinstall, or self-dependency is declared.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
dist/index.cjs15.9 MB file, sampled 256 KB
Source & flagged code
8 flagged · loading sourcedist/mcp.cjsView file
4|| (${_0x37951d} === "string" && ${_0x3b547f} && ${_0x3b547f} == +${_0x3b547f} && !(${_0x3b547f} % 1))`)[_0x5d233c(0x1dc2)](_0x14a41e,(0x0,_0x22c319['_'])`+${_0x3b547f}`);return;ca...
L5: || ${_0x37951d} === "boolean" || ${_0x3b547f} === null`)['assign'](_0x14a41e,(0x0,_0x22c319['_'])`[${_0x3b547f}]`);}}}function _0x26f5e2({gen:_0x204cbf,parentData:_0x3175ae,parentD...
L6: missingProperty: ${_0x4666b8},
L7: depsCount: ${_0x1a1c77},
L8: deps: ${_0x1bcb92}}`};var _0x11657e={'keyword':_0x33f974(0xb43),'type':_0x33f974(0x1037),'schemaType':_0x33f974(0x1037),'error':_0x38f7dc['error'],'code'(_0x1d4e35){const [_0x10105...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/mcp.cjsView on unpkg · L41#!/usr/bin/env node
L2: 'use strict';var a0_0x276fa0=a0_0x1f01;(function(_0x58f947,_0x126715){var _0x1a4bb0=a0_0x1f01,_0x5e7764=_0x58f947();while(!![]){try{var _0x483530=-parseInt(_0x1a4bb0(0x14ec))/0x1*(...
L3: || (${_0x37951d} == "string" && ${_0x3b547f} && ${_0x3b547f} == +${_0x3b547f})`)[_0x5d233c(0x1dc2)](_0x14a41e,(0x0,_0x22c319['_'])`+${_0x3b547f}`);return;case _0x5d233c(0x10c0):_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1Findings
4 High7 Medium5 Low
HighSame File Env Network Executiondist/mcp.cjs
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.462.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.462 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.