agent-qa@0.2.1
⚠ Under reviewThe self-improving Agentic QA harness with Memory
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe scanner's execution hints are not proof of an attack: the inspected child-process behavior installs browser support through a named CLI command. Source for several declared first-party runtime dependencies was unavailable, which prevents clearing the package and requires manual review.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI is launched when a user invokes the package's command; no package install lifecycle trigger is declared.
Impact
No attack impact was confirmed; unreviewed dependency behavior prevents a clean verdict.
Mechanism
The inspected child-process call invokes Playwright's browser installer. The behavior of unavailable first-party dependencies remains unresolved.
AI rationale
The scanner's execution hints are not proof of an attack: the inspected child-process behavior installs browser support through a named CLI command. Source for several declared first-party runtime dependencies was unavailable, which prevents clearing the package and requires manual review.
Evidence
package.jsondist/cli.jsdist/cli-main.js
Decision evidence
public snapshotAI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json exposes a CLI and library entrypoints and declares no install lifecycle script.
- The inspected child-process call runs the Playwright browser installer; a named CLI command exposes browser installation options.
- The CLI imports several declared first-party runtime packages whose source was unavailable for this review.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
5 flaggeddist/cli-main.jsView file
8744import { randomUUID as randomUUID6 } from "crypto";
L8745: import { spawnSync } from "child_process";
L8746: import {
High
Child Process
Package source references child process execution.
dist/cli-main.jsView on unpkg · L874424197// Do not inherit `--input-type=module` or test loaders that would reinterpret eval as ESM.
L24198: execArgv: [],
L24199: name: "agent-qa-writer-lease-heartbeat",
High
33"use strict";
L34: RE_INITIALIZE_URL = "https://vostride.com/docs/agent-qa/migrate/v0-1-to-v0-2";
L35: HARD_CUT_STEPS = [
...
L157: for (const [envKey, configPath] of Object.entries(ENV_MAPPING)) {
L158: const value = process.env[envKey];
L159: if (value !== void 0) {
...
L702: try {
L703: parsed = JSON.parse(bodySeed);
L704: } catch {
...
L1287: summary: bundle.summary,
L1288: body: bundle.body,
L1289: distilledEvidenceRef: {
High
Hidden Inline Dependency Execution
Source silently spawns a Node process to execute an inline dependency payload.
dist/cli-main.jsView on unpkg · L33Findings
4 High4 Medium5 Low
HighChild Processdist/cli-main.js
HighShelldist/cli-main.js
HighHidden Inline Dependency Executiondist/cli-main.js
HighRuntime Package Installdist/cli-main.js
MediumDynamic Requiredist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to agent-qa@0.2.1.
See all versions of agent-qa for other recorded verdicts.
- Review the evidence and your use of agent-qa@0.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.