registry / @whalent/agent-core / 0.3.476
@whalent/agent-core@0.3.476
Core runtime for Whalent Agent
AI Security Review
scanned 23d ago · by lpm-firewall-aiThe agent-skill write capability is concrete, but the inspected metadata has no installation lifecycle script and no active malicious chain was confirmed. A warning is appropriate until its MCP authorization and consent path are independently verified.
Static reason
One or more suspicious static signals were detected.
Trigger
A caller invokes the MCP skill-install capability.
Impact
A connected caller could add agent skill files; no confirmed unconsented automatic attack surface was established.
Mechanism
The runtime resolves machine or workspace skill directories, creates them, and writes supplied skill files.
AI rationale
The agent-skill write capability is concrete, but the inspected metadata has no installation lifecycle script and no active malicious chain was confirmed. A warning is appropriate until its MCP authorization and consent path are independently verified.
Evidence
dist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Package metadata declares a CLI entrypoint and no npm lifecycle scripts.
- The MCP bundle resolves skill destinations in workspace and machine agent directories.
- The MCP bundle includes a skill-install function that creates directories and writes skill files.
Evidence against
- No install-time hook, confirmed credential export, or destructive action was established from the inspected paths.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x127230=a0_0x3c14;(function(_0x5ee1d3,_0x42934d){var _0x2b2982=a0_0x3c14,_0xbdac3a=_0x5ee1d3();while(!![]){try{var _0x302175=parseInt(_0x2b2982(0x1066))/0x1+pa...
L3: || (${_0x2e11f2} == "string" && ${_0x390bf7} && ${_0x390bf7} == +${_0x390bf7})`)['assign'](_0xed8d5f,(0x0,_0x50b50c['_'])`+${_0x390bf7}`);return;case _0x1ba790(0x2378):_0x30af5e['e...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x2e11f2} === "string" && ${_0x390bf7} && ${_0x390bf7} == +${_0x390bf7} && !(${_0x390bf7} % 1))`)['assign'](_0xed8d5f,(0x0,_0x50b50c['_'])`+${_0x390bf7}`);return;case'boolea...
L5: || ${_0x2e11f2} === "boolean" || ${_0x390bf7} === null`)[_0x1ba790(0x1365)](_0xed8d5f,(0x0,_0x50b50c['_'])`[${_0x390bf7}]`);}}}function _0x3a286d({gen:_0x215b4c,parentData:_0x1dad1...
L6: missingProperty: ${_0x53b251},
Medium
Findings
3 High7 Medium5 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.476.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.476 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.