registry / agent-gear / 1.1.2

agent-gear@1.1.2

ZeroAsh Agent Gear - Agent controller daemon

AI Security Review

scanned 5h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User starts the CLI with a controller key and endpoint.

Impact

A compromised or untrusted configured controller could inspect directories, alter Git worktrees, invoke local agents, or access localhost services.

Mechanism

Authenticated controller-driven local agent and development operations.

Rationale

Source shows a deliberate controller daemon rather than covert install-time malware, but it exposes substantial remote agent-control capability. Warn so consumers assess the controller trust boundary.

Evidence

package.jsonsrc/index.tssrc/socketio-client.tssrc/worktree-handler.tssrc/port-forward.tssrc/acp/spawner.ts~/.zag/config.toml

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

agent-gear@1.1.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code