registry / biel-search / 0.1.83

biel-search@0.1.83

Ask AI chatbot for technical documentation

AI Security Review

scanned 16h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User interacts with the browser chatbot and explicitly selects an MCP connection option.

Impact

A user can be led to add a remote MCP server to an AI coding client; no automatic installation-time mutation occurs.

Mechanism

Browser chatbot WebSocket plus user-invoked MCP configuration deep links.

Rationale

This is not malicious install-time behavior, but its explicit MCP-agent setup capability warrants a warning under the firewall policy. The observed network calls are aligned with the package's chatbot purpose.

Evidence

package.jsondist/collection/services/biel-service.jsdist/collection/services/biel-websocket-service.jsdist/collection/components/biel-input-options/biel-input-options.js

Network endpoints2

app.biel.ai/api/v1wss://app.biel.ai/ws/messages

biel-search@0.1.83

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code