registry / @wolpertingerlabs/callboard / 1.0.0-alpha.35

@wolpertingerlabs/callboard@1.0.0-alpha.35

A web-based control panel for managing Claude Code sessions, autonomous agents, and multi-agent workflows

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package provides a user-invoked local web control panel for AI agent sessions with expected daemon, filesystem, and network behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs callboard CLI or starts the server

Impact

User-authorized local service can manage sessions and restart itself; no unconsented install-time behavior found

Mechanism

local dashboard/daemon management and agent orchestration

Rationale

Static inspection found powerful primitives, but they are tied to the package's advertised local control-panel/daemon purpose and require user invocation or authenticated runtime use. No concrete malicious install/import-time execution, exfiltration, destructive behavior, or AI-agent control hijack was found.

Evidence

package.jsonbin/callboard.jsbackend/dist/index.jsbackend/dist/utils/paths.js

Network endpoints2

registry.npmjs.org/${pkgName}/latestlocalhost:${port}

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json has prepare script that builds package on local install from git/source, but not a published-package install hook.
bin/callboard.js starts/stops a daemon and writes pid/log/env files under DATA_DIR when user invokes CLI.
backend/dist/index.js exposes authenticated APIs that can restart server and operate AI agent workflows.
backend/dist/index.js checks npm registry and Claude CLI status at runtime, aligned with dashboard functionality.

Evidence against

package.json has no postinstall/install lifecycle script for npm install-time execution.
package files are a Claude/agent control panel; child_process use is for user-invoked CLI daemon and Claude CLI checks.
Network endpoints seen are package-aligned: registry.npmjs.org version check and local web server APIs.
No evidence of credential harvesting/exfiltration, persistence beyond documented daemon management, destructive actions, or prompt/reviewer manipulation in inspected entrypoints.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

GitDependency

scanned 165 file(s), 2.35 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.openai.com, chatgpt.com, claude.ai, console.anthropic.com, developers.cloudflare.com, github.com, openrouter.ai, platform.openai.com, proxy.example.com, reactjs.org, registry.npmjs.org, support.anthropic.com, www.w3.org

Source & flagged code

1 flagged

bin/callboard.jsView file

Lines 4-44javascript

4// Entry point for the `callboard` command after global npm install.

5// Provides daemon management, log viewing, config introspection, and

6// a first-run setup experience — all with zero extra dependencies.

7// ─────────────────────────────────────────────────────────────────────

9import { parseArgs } from "node:util";

10import { spawn } from "node:child_process";

11import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync, openSync } from "node:fs";

12import { stat } from "node:fs/promises";

13import { join, resolve, dirname } from "node:path";

14import { fileURLToPath } from "node:url";

15import { createRequire } from "node:module";

16import { createInterface } from "node:readline";

18// ── Paths & constants ────────────────────────────────────────────────

19const __filename = fileURLToPath(import.meta.url);

20const __dirname = dirname(__filename);

21const PKG_ROOT = resolve(__dirname, "..");

22const SERVER_ENTRY = join(PKG_ROOT, "backend/dist/index.js");

24// Import shared path utilities from compiled backend

25const { DATA_DIR, ENV_FILE, ensureDataDir, ensureEnvFile } = await import(join(PKG_ROOT, "backend/dist/utils/paths.js"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/callboard.jsView on unpkg · L24

27// Import dotenv for .env parsing (already a project dependency)

28const require = createRequire(import.meta.url);

29const dotenv = require("dotenv");

31const PID_FILE = join(DATA_DIR, "callboard.pid");

32const LOG_DIR = join(DATA_DIR, "logs");

33const LOG_FILE = join(LOG_DIR, "callboard.log");

34const VERSION_CACHE_FILE = join(DATA_DIR, "version-check.json");

35const VERSION_CHECK_TTL = 4 * 60 * 60 * 1000; // 4 hours

36const DEFAULT_PORT = 8000;

38// Read version from package.json

39const pkgJson = JSON.parse(readFileSync(join(PKG_ROOT, "package.json"), "utf-8"));

40const VERSION = pkgJson.version;

41const PKG_NAME = pkgJson.name;

43// ── Argument parsing ─────────────────────────────────────────────────

44const rawArgs = process.argv.slice(2);

Source & flagged code

1 flagged · loading source

bin/callboard.jsView file

24// Import shared path utilities from compiled backend L25: const { DATA_DIR, ENV_FILE, ensureDataDir, ensureEnvFile } = await import(join(PKG_ROOT, "backend/dist/utils/paths.js")); L26:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/callboard.jsView on unpkg · L24

Findings

5 Medium5 Low

MediumDynamic Requirebin/callboard.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumGit Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

bin/callboard.jsView file

Lines 4-44javascript

4// Entry point for the `callboard` command after global npm install.

5// Provides daemon management, log viewing, config introspection, and

6// a first-run setup experience — all with zero extra dependencies.

9import { parseArgs } from "node:util";

10import { spawn } from "node:child_process";

11import { existsSync, readFileSync, writeFileSync, unlinkSync, mkdirSync, openSync } from "node:fs";

12import { stat } from "node:fs/promises";

13import { join, resolve, dirname } from "node:path";

14import { fileURLToPath } from "node:url";

15import { createRequire } from "node:module";

16import { createInterface } from "node:readline";

18// ── Paths & constants ────────────────────────────────────────────────

19const __filename = fileURLToPath(import.meta.url);

20const __dirname = dirname(__filename);

21const PKG_ROOT = resolve(__dirname, "..");

22const SERVER_ENTRY = join(PKG_ROOT, "backend/dist/index.js");

24// Import shared path utilities from compiled backend

25const { DATA_DIR, ENV_FILE, ensureDataDir, ensureEnvFile } = await import(join(PKG_ROOT, "backend/dist/utils/paths.js"));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/callboard.jsView on unpkg · L24

27// Import dotenv for .env parsing (already a project dependency)

28const require = createRequire(import.meta.url);

29const dotenv = require("dotenv");

31const PID_FILE = join(DATA_DIR, "callboard.pid");

32const LOG_DIR = join(DATA_DIR, "logs");

33const LOG_FILE = join(LOG_DIR, "callboard.log");

34const VERSION_CACHE_FILE = join(DATA_DIR, "version-check.json");

35const VERSION_CHECK_TTL = 4 * 60 * 60 * 1000; // 4 hours

36const DEFAULT_PORT = 8000;

38// Read version from package.json

39const pkgJson = JSON.parse(readFileSync(join(PKG_ROOT, "package.json"), "utf-8"));

40const VERSION = pkgJson.version;

41const PKG_NAME = pkgJson.name;

43// ── Argument parsing ─────────────────────────────────────────────────

44const rawArgs = process.argv.slice(2);