registry / agency-lang / 0.18.1
agency-lang@0.18.1
The Agency language
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe required source paths show package-aligned operations, and package.json defines no install lifecycle hook. Static scanner hints do not establish an attack in the inspected code.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Using the optimizer, running a CLI command or subprocess session, or invoking OAuth authentication.
Impact
These inspected operations support package functionality; no concrete malicious behavior was established.
Mechanism
The optimizer performs hash-checked writes to discovered source files; the runtime forks a child process; OAuth posts token parameters to its token URL.
AI rationale
The required source paths show package-aligned operations, and package.json defines no install lifecycle hook. Static scanner hints do not establish an attack in the inspected code.
Evidence
dist/lib/optimize/workspace.jsdist/lib/runtime/ipc.jsdist/lib/stdlib/oauth.jsdist/lib/cli/commands.js
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a library entrypoint and an explicit agency CLI; its scripts are development and CLI tasks, with no install lifecycle hook.
- The optimizer writes only changed files from its source map after checking discovery-time hashes; this is an explicit optimizer operation.
- The IPC module forks a subprocess for a runtime session and applies output limits.
- OAuth token exchange posts to the provided token URL as part of its authentication flow.
- The CLI spawns Node to run compiled output with its resolver shim and sandbox flags.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
7 flaggeddist/lib/optimize/workspace.jsView file
6/** Mint a fresh cache-partition token. */
L7: fork() {
L8: this.counter += 1;
High
Child Process
Package source references child process execution.
dist/lib/optimize/workspace.jsView on unpkg · L6dist/lib/runtime/ipc.jsView file
389env: { ...process.env, AGENCY_IPC: "1" },
L390: execArgv: [`--max-old-space-size=${memoryMb}`],
L391: ...(args.cwd ? { cwd: args.cwd } : {}),
High
dist/lib/optimize/optimizerModule.jsView file
32// eslint-disable-next-line no-restricted-syntax -- CLI-layer loading of a user artifact; the bundle path is only known at runtime
L33: const mod = await import(pathToFileURL(out).href);
L34: const factory = mod.default;
Findings
5 High4 Medium5 Low
HighChild Processdist/lib/optimize/workspace.js
HighShelldist/lib/runtime/ipc.js
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
HighSemantic Analysis Limiteddist/lib/cli/commands.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/lib/cli/commands.js
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to agency-lang@0.18.1.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.18.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.