registry / agency-lang / 0.18.2
agency-lang@0.18.2
The Agency language
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource inspection found no lifecycle script, self-dependency chain, or automatic exfiltration or persistence. Flagged capabilities are tied to the package's language runtime and explicit CLI commands.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit use of CLI commands or execution of an Agency program.
Impact
No unconsented package action was identified.
Mechanism
No automatic install-time behavior.
AI rationale
Source inspection found no lifecycle script, self-dependency chain, or automatic exfiltration or persistence. Flagged capabilities are tied to the package's language runtime and explicit CLI commands.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes library and CLI entrypoints, with no install lifecycle hook or runtime dependency on itself.
- The CLI's dynamic execution path adds a V8 restriction when the untrusted-output mode is selected.
- Subprocess code validates generated paths and confines temporary writes to its own package directory.
- Optimizer writeback checks source hashes before writing changed candidate files.
- OAuth behavior is user-initiated, uses a loopback callback, and stores tokens with restrictive file permissions.
- launchd persistence is reachable only through the explicit schedule command.
Evidence against
- No credential harvesting, covert exfiltration, install-time execution, or foreign agent-control-surface mutation was found.
- Network and process APIs implement explicit CLI/runtime features rather than an automatic package-install payload.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
7 flaggeddist/lib/optimize/workspace.jsView file
6/** Mint a fresh cache-partition token. */
L7: fork() {
L8: this.counter += 1;
High
Child Process
Package source references child process execution.
dist/lib/optimize/workspace.jsView on unpkg · L6dist/lib/runtime/ipc.jsView file
388env: { ...process.env, AGENCY_IPC: "1" },
L389: execArgv: [`--max-old-space-size=${memoryMb}`],
L390: ...(args.cwd ? { cwd: args.cwd } : {}),
High
•matchType = previous_version_dangerous_delta
matchedPackage = agency-lang@0.17.1
matchedIdentity = npm:YWdlbmN5LWxhbmc:0.17.1
similarity = 0.825
summary = stored previous version shares package body but lacks this dangerous source file
High
Findings
5 High4 Medium5 Low
HighChild Processdist/lib/optimize/workspace.js
HighShelldist/lib/runtime/ipc.js
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
HighSemantic Analysis Limiteddist/lib/cli/commands.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/lib/runtime/ipc.js
MediumDynamic Requiredist/scripts/agency.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to agency-lang@0.18.2.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.18.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.