registry / @wrongstack/core / 0.281.0

@wrongstack/core@0.281.0

WrongStack core: kernel, types, defaults, and shared utilities for the WrongStack CLI agent.

AI Security Review

scanned 10d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. The package exposes a broad agent framework with user-invoked network, filesystem, child-process, skill install, mailbox, and sync capabilities, but no install-time or import-time attack chain was identified.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User invokes WrongStack library/CLI features such as skill install, CloudSync, mailbox, execution, or logging.

Impact

No unconsented credential theft, persistence, destructive behavior, or AI-agent control hijack confirmed by static inspection.

Mechanism

Package-aligned agent framework capabilities

Rationale

Static inspection found no lifecycle hooks and no import-time execution; suspicious primitives are consistent with a WrongStack core agent package and are activated by explicit runtime features. Network and file operations are package-aligned and include path validation for higher-risk skill install and CloudSync flows.

Evidence

package.jsondist/index.jsdist/defaults/index.jsdist/skills/index.jsdist/infrastructure/index.jsREADME.md~/.wrongstack/project .wrongstack/project mailbox lock/token filesconfigured WrongStack skill/session/log/sync paths

Network endpoints7

api.github.com/repos/

@wrongstack/core@0.281.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code