registry / @whalent/agent / 0.3.466
@whalent/agent@0.3.466
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 25d ago · by lpm-firewall-aiNo malicious install-time behavior or data theft was confirmed. The agent-skill installation capability remains a meaningful, incompletely attributable control-surface risk.
Static reason
One or more suspicious static signals were detected.
Trigger
A caller invokes the MCP skill-install capability.
Impact
A caller could extend an AI agent's available skills; static inspection did not establish unconsented execution or a malicious payload.
Mechanism
The capability chooses a machine, workspace, or managed skill directory, creates it, and writes supplied files.
AI rationale
No malicious install-time behavior or data theft was confirmed. The agent-skill installation capability remains a meaningful, incompletely attributable control-surface risk.
Evidence
dist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 74.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package metadata exposes a command-line entry point and contains no install lifecycle hook in the inspected scripts.
- The MCP bundle resolves skill directories under a selected agent platform's home or workspace location.
- Its skill-install routine creates the resolved directory and writes supplied skill files.
- The reviewed bundle is heavily obfuscated, limiting confidence in the caller and consent path for these writes.
Evidence against
- No package install, preinstall, or postinstall hook was found in package.json.
- No concrete credential export, destructive action, or unconsented install-time agent-control mutation was established in the inspected code.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
7 flagged · loading sourcedist/mcp.cjsView file
1#!/usr/bin/env node
L2: 'use strict';var a0_0xc0d6b3=a0_0x256f;(function(_0x52673a,_0x6f0968){var _0x2c11cd=a0_0x256f,_0x3e63f0=_0x52673a();while(!![]){try{var _0x4d05f3=parseInt(_0x2c11cd(0xfcb))/0x1+par...
L3: || (${_0x4dbc28} == "string" && ${_0x5d353b} && ${_0x5d353b} == +${_0x5d353b})`)['assign'](_0xc7237d,(0x0,_0x5bc511['_'])`+${_0x5d353b}`);return;case'integer':_0x55db35[_0x4bc4b4(0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/mcp.cjsView on unpkg4|| (${_0x4dbc28} === "string" && ${_0x5d353b} && ${_0x5d353b} == +${_0x5d353b} && !(${_0x5d353b} % 1))`)[_0x4bc4b4(0x1a09)](_0xc7237d,(0x0,_0x5bc511['_'])`+${_0x5d353b}`);return;ca...
L5: || ${_0x4dbc28} === "boolean" || ${_0x5d353b} === null`)['assign'](_0xc7237d,(0x0,_0x5bc511['_'])`[${_0x5d353b}]`);}}}function _0x5f47d3({gen:_0x175973,parentData:_0x43f5df,parentD...
L6: missingProperty: ${_0x48cec0},
Medium
Findings
3 High7 Medium7 Low
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @whalent/agent@0.3.466.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.466 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.