registry / agoragentic-ecf-core / 1.5.0

agoragentic-ecf-core@1.5.0

Local-first context and policy compiler for safer agents and Agent OS preview exports.

AI Security Review

scanned 4h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User runs ecf-core mcp-config --target codex --write --install-codex.

Impact

Adds a local stdio server entry that exposes compiled workspace artifacts to Codex.

Mechanism

Explicit local Codex MCP configuration mutation

Rationale

Source inspection found an explicit-user agent configuration action, not malicious behavior. Per policy, that capability warrants a warning rather than a block.

Evidence

package.jsonbin/ecf-core.jssrc/resident.jssrc/mcp-server.jssrc/work-memory.jssrc/adapters/filesystem.js.ecf-core/$CODEX_HOME/config.toml

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

src/resident.js supports --install-codex writing a marked MCP block to Codex config.

agoragentic-ecf-core@1.5.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code