registry / agency-lang / 0.36.0
agency-lang@0.36.0
The Agency language
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged configuration writes and persistence are reached through explicit user commands, and ffmpeg processes supplied audio for conversion. Agent tracing can send prompt messages and completions to Statelog, but remote logging requires a configured host, project ID, and specifically named API key, consistent with a configured observability service.
Static reason
One or more suspicious static signals were detected.
Trigger
Agent runs can emit traces when Statelog is configured; skills install, LSP setup, scheduling, and audio conversion require their respective user actions.
Impact
Configured traces disclose agent prompts and completions to the configured Statelog service; the reviewed file and process actions serve the requested features.
Mechanism
Configured Statelog events include prompt messages and completions. The other reviewed behaviors write feature configuration or run ffmpeg on supplied audio.
AI rationale
The flagged configuration writes and persistence are reached through explicit user commands, and ffmpeg processes supplied audio for conversion. Agent tracing can send prompt messages and completions to Statelog, but remote logging requires a configured host, project ID, and specifically named API key, consistent with a configured observability service.
Evidence
.claude/skills/<skill>/SKILL.md<projectDir>/opencode.json<projectDir>/.claude/plugins/agency-lsp/.claude-plugin/plugin.json<projectDir>/.claude/plugins/agency-lsp/.lsp.json~/Library/LaunchAgents/com.agency.schedule.<name>.plist
Network endpoints1
statelog.adit.io
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a library entry point and an explicit CLI; no install hook appears in the inspected manifest.
- The agent's Statelog destination is configured with a specifically named STATELOG_API_KEY.
- Remote Statelog logging requires a host, project ID, and API key; the key alone does not enable it.
- When Statelog is configured, prompt-completion events include messages and completions, which are data used by the agent feature.
- Skill installation and LSP setup are explicit CLI commands with user-supplied names or targets.
- The ffmpeg subprocess converts supplied audio input and has a timeout and abort handling.
Evidence against
- Configured Statelog traces can include prompt and completion content sent to https://statelog.adit.io.
- The CLI can write skill and agent configuration files, and the scheduler can create launchd persistence when users invoke those features.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
6 flaggeddist/lib/optimize/optimizerModule.jsView file
32// eslint-disable-next-line no-restricted-syntax -- CLI-layer loading of a user artifact; the bundle path is only known at runtime
L33: const mod = await import(pathToFileURL(out).href);
L34: const factory = mod.default;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/lib/optimize/optimizerModule.jsView on unpkg · L32dist/lib/cli/schedule/backends/launchd.jsView file
1import { execFileSync } from "child_process";
L2: import * as fs from "fs";
...
L6: import renderPlist from "../../../templates/cli/schedule/plist.js";
L7: const PLIST_DIR = path.join(os.homedir(), "Library", "LaunchAgents");
L8: function plistPath(name) {
...
L64: agentDir: path.dirname(entry.agentFile),
L65: path: process.env.PATH ?? "/usr/local/bin:/usr/bin:/bin",
L66: home: os.homedir(),
...
L71: fs.mkdirSync(PLIST_DIR, { recursive: true });
L72: // Unload first if already loaded (launchctl load fails on already-loaded plists)
L73: if (fs.existsSync(dest)) {
Medium
Install Persistence
Source writes installer persistence such as shell profile or service configuration.
dist/lib/cli/schedule/backends/launchd.jsFindings
3 High6 Medium5 Low
HighSandbox Evasion Gated Capabilitydist/lib/stdlib/ffmpeg.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/lib/cli/skills.js
HighSemantic Analysis Limiteddist/lib/cli/attach.js#virtual:normalized:round1
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
MediumShips Build Helperdist/lib/cli/mlxSpeechServer.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
Low
Affected versions and remediation
This report applies to agency-lang@0.36.0.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.36.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.