registry / agency-lang / 0.7.0
agency-lang@0.7.0
The Agency language
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection found no lifecycle hook or import-time behavior that mutates broad AI-agent control surfaces, harvests credentials, or exfiltrates data. The flagged child_process, network, dynamic import, and persistence primitives are explicit CLI/runtime capabilities for user-authored Agency programs.
Static reason
No blocking static signals were detected.
Trigger
User runs agency CLI commands or imports runtime/stdlib APIs.
Impact
No unconsented install-time mutation, exfiltration, or remote payload execution identified.
Mechanism
User-invoked language runtime and developer tooling
AI rationale
Static inspection found no lifecycle hook or import-time behavior that mutates broad AI-agent control surfaces, harvests credentials, or exfiltrates data. The flagged child_process, network, dynamic import, and persistence primitives are explicit CLI/runtime capabilities for user-authored Agency programs.
Evidence
package.jsondist/scripts/agency.jsdist/lib/stdlib/oauth.jsdist/lib/optimize/optimizerModule.jsdist/lib/cli/schedule/backends/launchd.jsdist/lib/mcp/setup.jsdist/lib/lsp/setup.jsdist/lib/runtime/providerModules.js~/.agency/oauth/<name>.json~/Library/LaunchAgents/com.agency.schedule.<name>.plist~/.agency/schedules/<name>/run.sh~/.codex/config.toml.claude/plugins/agency-lsp/.claude-plugin/plugin.json.claude/plugins/agency-lsp/.lsp.jsonopencode.json
Network endpoints1
statelog.adit.io
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no preinstall/install/postinstall lifecycle scripts; bin is user-invoked dist/scripts/agency.js.
- dist/lib/optimize/optimizerModule.js dynamically imports only a user-supplied optimizer file after CLI selection and removes the temp bundle.
- dist/lib/stdlib/oauth.js stores OAuth tokens under ~/.agency/oauth and posts only to user-configured HTTPS tokenUrl during explicit authorize/refresh flows.
- dist/lib/cli/schedule/backends/launchd.js creates launchd jobs only through agency schedule add/edit user commands.
- dist/lib/mcp/setup.js and dist/lib/lsp/setup.js write Codex/agent config only via explicit agency mcp/lsp setup commands, not install-time.
- dist/lib/runtime/providerModules.js imports provider modules from config/env paths as an advertised extensibility feature.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
6 flaggeddist/lib/optimize/grading/agencyRunner.jsView file
31}
L32: async exec(agencyFile, nodeName, args) {
L33: const scratchDir = fs.mkdtempSync(path.join(os.tmpdir(), "agency-runner-"));
High
Child Process
Package source references child process execution.
dist/lib/optimize/grading/agencyRunner.jsView on unpkg · L31dist/lib/runtime/ipc.jsView file
348env: { ...process.env, AGENCY_IPC: "1" },
L349: execArgv: [`--max-old-space-size=${memoryMb}`],
L350: ...(args.cwd ? { cwd: args.cwd } : {}),
High
dist/lib/ir/prettyPrint.test.jsView file
Findings
3 High4 Medium5 Low
HighChild Processdist/lib/optimize/grading/agencyRunner.js
HighShelldist/lib/runtime/ipc.js
HighSame File Env Network Executiondist/lib/stdlib/oauth.js
MediumDynamic Requiredist/lib/optimize/optimizerModule.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/lib/cli/schedule/backends/launchd.js
LowScripts Present
LowEvaldist/lib/ir/prettyPrint.test.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to agency-lang@0.7.0.
See all versions of agency-lang for other recorded verdicts.
- Review the evidence and your use of agency-lang@0.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.