registry / agency-lang / 0.19.2
agency-lang@0.19.2
The Agency language
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe inspected flagged primitives are tied to package functionality and have no concrete attack behavior. The manifest has no install lifecycle hook, and OAuth exchanges authorization data with its configured token endpoint.
Static reason
No blocking static signals were detected.
Trigger
These behaviors require use of the relevant optimizer, CLI, subprocess, or OAuth functionality.
Impact
No malicious effect was established from the inspected source.
Mechanism
Writeback checks source hashes, subprocesses receive caller-provided settings, CLI launches without a shell, and OAuth exchanges authorization parameters at its token URL.
AI rationale
The inspected flagged primitives are tied to package functionality and have no concrete attack behavior. The manifest has no install lifecycle hook, and OAuth exchanges authorization data with its configured token endpoint.
Evidence
dist/lib/optimize/workspace.jsdist/lib/runtime/ipc.jsdist/lib/stdlib/oauth.jsdist/lib/cli/commands.js
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines the package entrypoints and development scripts, with no preinstall, install, or postinstall hook.
- The optimizer writeback validates source hashes before writing changed files.
- IPC subprocess creation passes caller-supplied limits and working directory to the child.
- OAuth posts authorization parameters to the configured token URL.
- The CLI launches compiled output with shell execution disabled.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/lib/optimize/workspace.jsView file
6/** Mint a fresh cache-partition token. */
L7: fork() {
L8: this.counter += 1;
High
Child Process
Package source references child process execution.
dist/lib/optimize/workspace.jsView on unpkg · L6dist/lib/runtime/ipc.jsView file
388env: { ...process.env, AGENCY_IPC: "1" },
L389: execArgv: [`--max-old-space-size=${memoryMb}`],
L390: ...(args.cwd ? { cwd: args.cwd } : {}),
High
dist/lib/optimize/optimizerModule.jsView file
32// eslint-disable-next-line no-restricted-syntax -- CLI-layer loading of a user artifact; the bundle path is only known at runtime
L33: const mod = await import(pathToFileURL(out).href);
L34: const factory = mod.default;
Findings
4 High4 Medium5 Low
HighChild Processdist/lib/optimize/workspace.js
HighShelldist/lib/runtime/ipc.js
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
HighSemantic Analysis Limiteddist/lib/cli/commands.js#virtual:normalized:round1
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to agency-lang@0.19.2.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.19.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.