registry / @whalent/agent-core / 0.3.477
@whalent/agent-core@0.3.477
Core runtime for Whalent Agent
AI Security Review
scanned 23d ago · by lpm-firewall-aiDowngrade to a warning because the package can configure an MCP execution surface, but inspected evidence does not establish unconsented installation-time mutation, exfiltration, or a payload attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A caller invokes the MCP configuration feature.
Impact
A configured AI client could later launch the supplied server or contact the supplied URL.
Mechanism
It writes supplied server command, arguments, environment values, or URL into an MCP-server configuration.
AI rationale
Downgrade to a warning because the package can configure an MCP execution surface, but inspected evidence does not establish unconsented installation-time mutation, exfiltration, or a payload attack.
Evidence
dist/mcp.cjs.claude.json
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes a command entrypoint and contains no npm lifecycle hook.
- The MCP bundle can add a supplied command, arguments, environment, or URL to a Claude MCP-server configuration.
Evidence against
- No install-time hook or confirmed credential export was found in the inspected manifest and configuration code.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Oversized source lightweight scan
dist/index.cjs16.3 MB file, sampled 256 KB
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0x3b2a83=a0_0x540a;(function(_0x4a139b,_0x406cae){var _0x5d269f=a0_0x540a,_0x38a6e3=_0x4a139b();while(!![]){try{var _0x379017=parseInt(_0x5d269f(0x13cc))/0x1+-p...
L3: || (${_0x158f99} == "string" && ${_0x4ad5c4} && ${_0x4ad5c4} == +${_0x4ad5c4})`)['assign'](_0x1be106,(0x0,_0x5b47b3['_'])`+${_0x4ad5c4}`);return;case'integer':_0x1f7c3f['elseIf']((...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x158f99} === "string" && ${_0x4ad5c4} && ${_0x4ad5c4} == +${_0x4ad5c4} && !(${_0x4ad5c4} % 1))`)[_0x5a630b(0x2db)](_0x1be106,(0x0,_0x5b47b3['_'])`+${_0x4ad5c4}`);return;cas...
L5: || ${_0x158f99} === "boolean" || ${_0x4ad5c4} === null`)[_0x5a630b(0x2db)](_0x1be106,(0x0,_0x5b47b3['_'])`[${_0x4ad5c4}]`);}}}function _0x2feefe({gen:_0x1dc7e3,parentData:_0x27ebe6...
L6: missingProperty: ${_0x120c9a},
Medium
Findings
3 High7 Medium5 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.477.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.477 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.