registry / autotel-adapters / 2.0.10

autotel-adapters@2.0.10

Framework adapters and composable DX helpers for autotel

AI Security Review

scanned 12d ago · by lpm-firewall-ai

No confirmed malicious attack surface. This package provides explicit framework request-tracing adapters; it has no install-time execution, filesystem mutation, shell execution, or direct network client.

Static reason

One or more suspicious static signals were detected.

Trigger

Consumer imports and wraps a framework handler.

Impact

Telemetry behavior is delegated to the declared autotel dependency and caller configuration; no concrete malicious chain was found.

Mechanism

Explicit framework request-tracing wrappers.

Rationale

The suspicious environment-variable and dependency-bridge signals are package-aligned configuration and normal compiled imports. Direct source inspection found no lifecycle hook, exfiltration code, remote payload loading, persistence, destructive action, or AI-agent control-surface mutation.

Evidence

package.jsondist/index.jsdist/core.jsdist/integration-CfkaoVmE.js

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

No npm lifecycle hook is declared; scripts are development/build/test/clean only.
Environment access only resolves caller-selected configuration keys.

autotel-adapters@2.0.10

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code