registry / @wrongstack/core / 0.280.0

@wrongstack/core@0.280.0

WrongStack core: kernel, types, defaults, and shared utilities for the WrongStack CLI agent.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Risky primitives are exposed as user-invoked WrongStack agent framework features rather than install-time or import-time behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit runtime use of WrongStack APIs or slash commands, not npm install

Impact

Package-aligned runtime operations only; no unconsented install-time mutation or exfiltration identified

Mechanism

agent framework utilities with skill install, mailbox, model registry, storage, and tool execution support

Rationale

Static inspection found a broad agent framework with network, file, and process capabilities, but no lifecycle hook, import-time execution chain, credential exfiltration, stealth persistence, or unconsented foreign agent control mutation. The scanner hints are explained by package-aligned exported functionality and bundled documentation.

Evidence

package.jsondist/index.jsdist/defaults/index.jsdist/skills/index.jsskills/mailbox-bridge/SKILL.mdskills/wrongstack-mailbox/SKILL.md

Network endpoints8

api.github.com/repos/{owner}/{repo}/tarball/{ref}skills.sh/api/skillsmodels.dev/api.json/mcp

@wrongstack/core@0.280.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code