registry / @whalent/agent / 0.3.504
@whalent/agent@0.3.504
Stable wrapper for Whalent Agent core runtime
AI Security Review
scanned 10d ago · by lpm-firewall-aiSource inspection found a first-party agent extension capability in the obfuscated MCP bundle, but did not establish its activation caller or an unconsented attack. Warn because the capability can place fetched skill content where an agent may load it.
Static reason
One or more suspicious static signals were detected.
Trigger
Invocation of the bundled skill-management operation; its caller was not resolved in the obfuscated bundle.
Impact
Installed skill content may be loaded by the corresponding agent.
Mechanism
The code fetches skill files from a configured API and writes them under a selected platform, workspace, or managed skill directory, with a path containment check.
AI rationale
Source inspection found a first-party agent extension capability in the obfuscated MCP bundle, but did not establish its activation caller or an unconsented attack. Warn because the capability can place fetched skill content where an agent may load it.
Evidence
dist/mcp.cjs
Decision evidence
public snapshotAI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes dist/index.cjs as the CLI entrypoint.
- dist/mcp.cjs contains a skill installer that writes files into platform, workspace, or managed skill directories.
- dist/mcp.cjs fetches skill files from a configured API using a bearer token, then passes them to the installer.
- The bundle is heavily obfuscated, and the caller that activates the skill installer was not resolved.
Evidence against
- package.json lists prepublishOnly as a build command; it shows no preinstall, install, or postinstall hook.
- dist/mcp.cjs checks skill file paths to keep writes within the selected skill directory.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcedist/mcp.cjsView file
4|| (${_0x576f7b} === "string" && ${_0x3131b3} && ${_0x3131b3} == +${_0x3131b3} && !(${_0x3131b3} % 1))`)['assign'](_0x2dd874,(0x0,_0xd4d26c['_'])`+${_0x3131b3}`);return;case'boolea...
L5: || ${_0x576f7b} === "boolean" || ${_0x3131b3} === null`)['assign'](_0x2dd874,(0x0,_0xd4d26c['_'])`[${_0x3131b3}]`);}}}function _0x375294({gen:_0xb2d4f2,parentData:_0x56851c,parentD...
L6: missingProperty: ${_0x1b4746},
L7: depsCount: ${_0x29af7a},
L8: deps: ${_0x3d12c1}}`};var _0x17cfd5={'keyword':'dependencies','type':'object','schemaType':'object','error':_0x141e19['error'],'code'(_0x4e11be){const [_0xe817e,_0x4fb7b5]=_0x41e1b...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/mcp.cjsView on unpkg · L41#!/usr/bin/env node
L2: 'use strict';var a0_0x129b5c=a0_0xb8b7;(function(_0x5ee2d3,_0xb3031){var _0x4f6ae0=a0_0xb8b7,_0x100a97=_0x5ee2d3();while(!![]){try{var _0x40185e=parseInt(_0x4f6ae0(0x192d))/0x1*(-p...
L3: || (${_0x576f7b} == "string" && ${_0x3131b3} && ${_0x3131b3} == +${_0x3131b3})`)['assign'](_0x2dd874,(0x0,_0xd4d26c['_'])`+${_0x3131b3}`);return;case _0x4b3d27(0x1956):_0x5e821e[_0...
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/mcp.cjsView on unpkg · L1•
Findings
4 High7 Medium7 Low
HighSame File Env Network Executiondist/mcp.cjs
HighObfuscated Payload Loaderdist/mcp.cjs
HighObfuscated
HighSemantic Analysis Limiteddist/mcp.cjs
MediumDynamic Requiredist/mcp.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/jupyter_sidecar.py
MediumOversized Source Filedist/core.cjs
MediumOversized Cli Entrypointdist/core.cjs
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/mcp.cjs
LowFilesystem
Affected versions and remediation
This report applies to @whalent/agent@0.3.504.
See all versions of @whalent/agent for other recorded verdicts.
- Review the evidence and your use of @whalent/agent@0.3.504 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.