registry / agency-lang / 0.27.0
agency-lang@0.27.0
The Agency language
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe inspected source supports ordinary CLI, IPC, OAuth, and audio-transcoding functions, and package.json has no automatic lifecycle hook. Scanner signals alone do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI or library is invoked, or a user-requested OAuth or audio operation runs.
Impact
No confirmed malicious effect; the inspected operations support package functionality.
Mechanism
Subprocesses run Node, open a browser URL, or transcode audio using explicit arguments; no package install hook or covert data transfer was established.
AI rationale
The inspected source supports ordinary CLI, IPC, OAuth, and audio-transcoding functions, and package.json has no automatic lifecycle hook. Scanner signals alone do not establish malicious behavior.
Evidence
dist/lib/runtime/ipc.jsdist/lib/stdlib/oauth.jsdist/lib/stdlib/ffmpeg.jsdist/lib/cli/commands.js
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json contains no automatic lifecycle hook; its scripts are user-invoked development and CLI commands.
- IPC subprocesses inherit the current environment and set AGENCY_IPC for parent-child coordination.
- OAuth invokes the platform browser opener with a URL, consistent with interactive authentication.
- FFmpeg arguments transcode audio input to an output file; this is ordinary user-requested media processing.
- The CLI spawns Node with shell disabled to run compiled Agency output.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
9 flaggeddist/lib/runtime/ipc.jsView file
9import { fileURLToPath } from "url";
L10: import { fork } from "child_process";
L11: import { rmSync, writeFileSync, mkdirSync } from "fs";
High
Child Process
Package source references child process execution.
dist/lib/runtime/ipc.jsView on unpkg · L9dist/lib/stdlib/oauth.js#virtual:normalized:round1View file
27}
L28: /** The token directory as a root plus the provider"s file name in it. */\nfunction tokenLocation(name) {\n if (!VALID_NAME_PATTERN.test(name)) {\n throw new Error(`Inval...
L29: * which is itself agency-callable but hasn"t been migrated to the\n * context-injected pattern yet) can share one body. When `signal` is\n * present, the local callback server, the...
High
Shell
Package source references shell execution.
dist/lib/stdlib/oauth.js#virtual:normalized:round1View on unpkg · L27Findings
6 High6 Medium5 Low
HighChild Processdist/lib/runtime/ipc.js
HighShelldist/lib/stdlib/oauth.js#virtual:normalized:round1
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
HighSandbox Evasion Gated Capabilitydist/lib/stdlib/ffmpeg.js
HighSemantic Analysis Limiteddist/lib/cli/commands.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/lib/cli/commands.js
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
MediumShips Build Helperdist/lib/cli/mlxSpeechServer.py
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to agency-lang@0.27.0.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.27.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.