registry / @yeshwanthyk/runtime-effect / 0.3.3

@yeshwanthyk/runtime-effect@0.3.3

Effect-powered runtime layer for Marvin agents (config, hooks, tools, sessions).

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. An explicit caller of the cockpit installer can add Marvin hook commands to Claude/Codex configuration and create a Pi extension. Runtime hook loading executes user-configured extensions, not bundled remote payloads.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A consuming application explicitly calls runCockpitInstallerAction('install'); hooks run only when the host loads configured extensions.

Impact

Can extend configured agent lifecycle behavior under the user's account; no install-time activation or exfiltration is present.

Mechanism

explicit AI-agent hook/extension installation and user-configured dynamic imports

Rationale

No malicious install-time, exfiltration, remote-payload, or stealth-persistence behavior was found. The explicit cross-agent configuration installer is a real lifecycle-control capability and warrants a warning under policy.

Evidence

package.jsondist/cockpit/installers.jsdist/hooks/loader.jsdist/extensibility/custom-tools/loader.js~/.claude/settings.json~/.codex/hooks.json~/.pi/agent/extensions/marvin-cockpit/index.ts~/.config/marvin/integrations/marvin-cockpit-hook

Decision evidence

public snapshot

@yeshwanthyk/runtime-effect@0.3.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code