registry / @whalent/agent / 0.3.328

@whalent/agent@0.3.328

Stable wrapper for Whalent Agent core runtime

AI Security Review

scanned 12d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. A user-run CLI daemon connects to the Whalent platform, receives configuration/remote commands, and can download and activate helper manifests. Its obfuscated executable prevents confirming the effective safeguards or exact endpoints.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the whalent CLI daemon.

Impact

Remote configuration, command handling, and helper activation could affect the local user environment.

Mechanism

Obfuscated remote-managed agent runtime with helper updates

Rationale

This is not concrete malware under the install-time blocking policy, but deliberate obfuscation combined with a remote-managed local agent and activated downloads creates unresolved, material risk.

Evidence

package.jsonREADME.mddist/index.cjsdist/jupyter_sidecar.py

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Runtime CLI bundle is deliberately obfuscated, preventing reliable audit of its filesystem, process, and network actions.

@whalent/agent@0.3.328

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code