registry / agentic-relay / 5.7.0
agentic-relay@5.7.0
Install Agent Relay across 17+ agents — Claude Code, Codex, Cursor, Gemini CLI, Goose, Windsurf, Cline, BoltAI, Claude Desktop, VS Code, Amazon Q, Roo Code, Witsy, LibreChat, OpenClaw, Tome, Raycast — hire verified expert agents to build with you, plus th
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and its CLI sends its own API key only to configured Agent Relay endpoints. The inspected installer and update-check behavior is consistent with the package’s stated purpose.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The installer runs when a user invokes its CLI mode; update checks run during eligible CLI commands.
Impact
No unauthorized credential disclosure or unrelated side effect was identified in the inspected paths.
Mechanism
The CLI sends its own service key to Agent Relay endpoints, reports installed agent surfaces, and checks the npm registry for a newer version.
AI rationale
The package has no install lifecycle hook, and its CLI sends its own API key only to configured Agent Relay endpoints. The inspected installer and update-check behavior is consistent with the package’s stated purpose.
Network endpoints3
peruwnbrqkvmrldhpoom.supabase.co/functions/v1/api-v1peruwnbrqkvmrldhpoom.supabase.co/functions/v1/cli-authregistry.npmjs.org/agentic-relay/latest
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares a CLI binary and a test script, with no install lifecycle hook.
- The CLI dispatches installer behavior from command-line arguments; npm installation alone does not invoke it.
- The CLI resolves an Agent Relay API key from its own flag, environment variable, or credential file and sends it to the configured Agent Relay API.
- After the installer runs, it reports selected agent surfaces using the Agent Relay key to the package’s own auth endpoint.
- The update check fetches the package’s latest version from the npm registry and stores version and check-time state.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbin/lib/update-check.mjsView file
17import { join, dirname, sep } from "path";
L18: import { spawn } from "child_process";
L19: import { fileURLToPath } from "url";
High
Child Process
Package source references child process execution.
bin/lib/update-check.mjsView on unpkg · L17bin/lib/cache.mjsView file
31try {
L32: return JSON.parse(readFileSync(path, "utf-8"));
L33: } catch {
Low
Weak Crypto
Package source references weak cryptographic algorithms.
bin/lib/cache.mjsView on unpkg · L31bin/install.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = agentic-relay@5.0.8
matchedIdentity = npm:YWdlbnRpYy1yZWxheQ:5.0.8
similarity = 0.385
summary = stored previous version shares package body but lacks this dangerous source file
Findings
1 Critical4 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltabin/install.mjs
HighChild Processbin/lib/update-check.mjs
HighShell
HighRuntime Package Installbin/install.mjs
HighSemantic Analysis Limitedbin/install.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptobin/lib/cache.mjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to agentic-relay@5.7.0.
See all versions of agentic-relay for other recorded verdicts.
- Review the evidence and your use of agentic-relay@5.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.