registry / balladeer / 0.0.4

balladeer@0.0.4

Installer for the Balladeer client (decision memory for engineering teams and their AI agents): downloads the sha256-verified client from get.balladeer.ai and installs it globally.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

The user-invoked CLI acts as a remote bootstrapper rather than containing the advertised client. It fetches a tarball and matching hash from a configurable server, writes it to a temporary directory, and asks npm to globally install it.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `balladeer`; installation requires terminal confirmation unless `--yes` is supplied.

Impact

A compromised or user-overridden installer endpoint can replace the global `balladeer` package with arbitrary package contents.

Mechanism

Remote tarball download and global npm installation.

Rationale

The package has no automatic lifecycle execution or credential/configuration abuse, but its sole function is to install a remotely served, same-origin-hash-verified replacement package. Treat it as a user-invoked staged payload carrier and warn rather than block.

Evidence

package.jsonbin/balladeer.jsREADME.md

Network endpoints2

get.balladeer.ai/install/client.tgzget.balladeer.ai/install/client.tgz.sha256

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with false-positive risk.

balladeer@0.0.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code