registry / @yuandc/aica / 0.1.25
@yuandc/aica@0.1.25
AICA remote Agent worker
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe flagged daemon and platform checks implement explicit background execution and ordinary path handling. Inspected authentication, remote jobs, and file transfers align with the CLI's remote-agent functionality, with no concrete malicious chain established.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit CLI login, start, daemon, or session import commands activate the relevant functionality.
Impact
The enabled service provides remote agent and filesystem access; inspected source does not establish covert harvesting or malicious installation behavior.
Mechanism
The worker authenticates to its configured ACA server, polls for work, runs local agent processes, and transfers project files.
AI rationale
The flagged daemon and platform checks implement explicit background execution and ordinary path handling. Inspected authentication, remote jobs, and file transfers align with the CLI's remote-agent functionality, with no concrete malicious chain established.
Network endpoints1
aca.kinghon.com.cn:8843/
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has explicit start/help scripts, no install lifecycle hooks, and no runtime self-dependency.
- dist/core/aca-config.js uses platform checks for path normalization, not execution gating.
- dist/commands/daemon.js launches the current CLI as a detached worker through explicit daemon commands.
- dist/commands/start.js activates heartbeat, job, and filesystem workers through the start command.
- Login obtains an ACA token from the selected server; the API client uses that service configuration for authenticated requests.
- File transfers resolve real paths and reject files outside the requested project root.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
4 flaggeddist/core/aca-config.jsView file
1import{readJsonFile as l,writeJsonFile as h}from"./fs.js";import{getAcaConfigPath as f}from"./paths.js";import{randomUUID as I}from"node:crypto";import j from"node:os";import m fro...
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/core/aca-config.jsView on unpkg · L11function i(t){const o=process.platform==="win32"?m.win32:m.posix,e=o.normalize(t),c=o.parse(e).root,n=e.length>c.length?e.replace(/[\\/]+$/,""):e;return process.platform==="win32"?n.toLocaleLowerCase("en-US"):n}function R(t){const o=s(),e=o.projects.filter(r=>r.projectId!==t&&r.name!==t),c=o.default
Low
Ai Review Evidence
dist/core/aca-config.js uses platform checks for path normalization, not execution gating.
dist/core/aca-config.jsView on unpkg · L1dist/commands/daemon.jsView file
•
Findings
2 High3 Medium7 Low
HighSandbox Evasion Gated Capabilitydist/core/aca-config.js
HighPrevious Version Dangerous Deltadist/commands/daemon.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/core/aca-config.js
Affected versions and remediation
This report applies to @yuandc/aica@0.1.25.
See all versions of @yuandc/aica for other recorded verdicts.
- Review the evidence and your use of @yuandc/aica@0.1.25 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.