registry / @whalent/agent-core / 0.3.521
@whalent/agent-core@0.3.521
Core runtime for Whalent Agent
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package exposes agent skill installation and downloading behavior, but the obfuscated source excerpts do not resolve its activation or consent flow. This leaves a concrete agent-extension capability with unresolved risk, warranting a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
Unknown from the inspected excerpts; package installation does not invoke a lifecycle script.
Impact
If activated without user consent, installed skill content could affect an agent. The evidence does not establish that this occurs automatically or without consent.
Mechanism
A helper creates the selected skill directory and writes provided text and decoded binary files; a separate downloader retrieves skill files using a bearer token.
AI rationale
The package exposes agent skill installation and downloading behavior, but the obfuscated source excerpts do not resolve its activation or consent flow. This leaves a concrete agent-extension capability with unresolved risk, warranting a warning rather than a block.
Evidence
dist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 77.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json defines a command-line entrypoint and no lifecycle scripts.
- dist/mcp.cjs contains an agent-skill installer that creates directories and writes supplied files into machine, workspace, or managed agent skill locations.
- dist/mcp.cjs also contains a downloader that sends a bearer token to a platform-derived URL and returns the response files for installation.
- The bundle is heavily obfuscated, and the inspected excerpts do not establish what user action activates skill installation.
Evidence against
- The manifest has no preinstall, install, or postinstall hook; the relevant entrypoint is a command-line executable.
- The skill-writing helper rejects absolute paths and paths that escape the selected skill directory.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
8 flagged · loading sourcedist/mcp.cjsView file
4|| (${_0x1589a4} === "string" && ${_0x270fa9} && ${_0x270fa9} == +${_0x270fa9} && !(${_0x270fa9} % 1))`)[_0x439bd1(0x160d)](_0x648275,(0x0,_0x39dc03['_'])`+${_0x270fa9}`);return;ca...
L5: || ${_0x1589a4} === "boolean" || ${_0x270fa9} === null`)[_0x439bd1(0x160d)](_0x648275,(0x0,_0x39dc03['_'])`[${_0x270fa9}]`);}}}function _0x22c122({gen:_0x1da907,parentData:_0xb481f...
L6: missingProperty: ${_0x5823e2},
L7: depsCount: ${_0x304dbb},
L8: deps: ${_0x39e883}}`};var _0x3a3173={'keyword':_0x3fff6b(0x99e),'type':'object','schemaType':_0x3fff6b(0x539),'error':_0x57c268['error'],'code'(_0xa20888){const [_0x5d04d5,_0x4cc90...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/mcp.cjsView on unpkg · L41#!/usr/bin/env node
L2: 'use strict';var a0_0x12586f=a0_0x22f1;(function(_0x50d96a,_0x48104e){var _0x187796=a0_0x22f1,_0x314fd2=_0x50d96a();while(!![]){try{var _0x560cc0=-parseInt(_0x187796(0x7af))/0x1+-p...
L3: || (${_0x1589a4} == "string" && ${_0x270fa9} && ${_0x270fa9} == +${_0x270fa9})`)[_0x439bd1(0x160d)](_0x648275,(0x0,_0x39dc03['_'])`+${_0x270fa9}`);return;case _0x439bd1(0x1a60):_0x...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1Findings
4 High7 Medium5 Low
HighSame File Env Network Executiondist/mcp.cjs
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @whalent/agent-core@0.3.521.
See all versions of @whalent/agent-core for other recorded verdicts.
- Review the evidence and your use of @whalent/agent-core@0.3.521 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.