registry / agency-lang / 0.19.3
agency-lang@0.19.3
The Agency language
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected flagged code supports ordinary runtime, OAuth, and local model-serving functions. No concrete malicious attack surface was established.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Using the CLI runtime, OAuth flow, or local model serving feature.
Impact
No confirmed malicious effect or package-install-time behavior was established.
Mechanism
The inspected source shows a subprocess runtime, an authorization-code token exchange, and a Python model-server launch with offline mode enabled.
AI rationale
The manifest has no install lifecycle hook, and the inspected flagged code supports ordinary runtime, OAuth, and local model-serving functions. No concrete malicious attack surface was established.
Decision evidence
public snapshotAI called this Clean at 82.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines development and test commands; it contains no install lifecycle hook.
- The flagged workspace module manages an in-memory cache identity counter.
- The IPC module runs subprocess execution segments as part of the runtime.
- OAuth token exchange uses the package's HTTP helper to send an authorization-code request.
- The CLI starts Node with generated output and runtime arguments.
- Local model serving starts Python with inherited environment and offline mode enabled.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
8 flaggeddist/lib/optimize/workspace.jsView file
6/** Mint a fresh cache-partition token. */
L7: fork() {
L8: this.counter += 1;
High
Child Process
Package source references child process execution.
dist/lib/optimize/workspace.jsView on unpkg · L6dist/lib/runtime/ipc.jsView file
388env: { ...process.env, AGENCY_IPC: "1" },
L389: execArgv: [`--max-old-space-size=${memoryMb}`],
L390: ...(args.cwd ? { cwd: args.cwd } : {}),
High
dist/lib/optimize/optimizerModule.jsView file
32// eslint-disable-next-line no-restricted-syntax -- CLI-layer loading of a user artifact; the bundle path is only known at runtime
L33: const mod = await import(pathToFileURL(out).href);
L34: const factory = mod.default;
Findings
5 High6 Medium5 Low
HighChild Processdist/lib/optimize/workspace.js
HighShelldist/lib/runtime/ipc.js
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
HighSemantic Analysis Limiteddist/lib/cli/commands.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/lib/cli/localServe.js
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
MediumShips Build Helperdist/lib/cli/mlxEmbedServer.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to agency-lang@0.19.3.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.19.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.