registry  /  bossmode  /  0.13.19

bossmode@0.13.19

Discord-style AI team chat room

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package starts a local Bossmode server only after the user runs its CLI, and stores its own config, pid, and log files.

Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs `bossmode on`, `bossmode off`, or `bossmode status`.
Impact
Starts/stops a local web service and stores Bossmode configuration; no confirmed exfiltration or persistence beyond the requested daemon.
Mechanism
user-invoked local daemon management
Rationale
Static inspection found risky primitives, but they are aligned with the package's CLI/server purpose and are user-invoked rather than lifecycle-triggered. I found no concrete credential theft, destructive behavior, remote payload execution, or unconsented AI-agent control-surface mutation.
Evidence
package.jsondist/cli/index.jsdist/server/daemon.jsdist/shared/config.js~/.bossmode/config.json~/.bossmode/bossmode.pid~/.bossmode/bossmode.log

Decision evidence

public snapshot
AI called this Clean at 84.0% confidence as Benign with medium false-positive risk.
Evidence for block
  • package.json defines no install/preinstall/postinstall lifecycle hooks; only a user-invoked bin exists.
  • dist/cli/index.js forks dist/server/daemon.js only when `bossmode on` is run, with host/port from config or CLI flags.
  • dist/shared/config.js writes config and pid/log files under ~/.bossmode or BOSSMODE_DIR, and reads provider API keys from env/config for app use.
  • Network-facing behavior is local server startup for a Discord-style AI team chat app; default bind is 127.0.0.1:8080.
Evidence against
  • No install-time or import-time execution observed in package.json or CLI entrypoint.
  • No credential harvesting/exfiltration endpoints found in inspected CLI/config/server startup files.
  • child_process use is limited to forking the package daemon and stopping it by PID.
  • Scanner web bundle flags appear consistent with bundled frontend/editor assets, not confirmed remote code execution from inspected source.
Behavioral surface
Source
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 224 file(s), 4.79 MB of source, external domains: 10.8.0.24, api.example.com, api.example.invalid, api.linear.app, codesandbox.io, github.com, json-schema.org, lea.verou.me, lexical.dev, nodebox-runtime.codesandbox.io, opensource.org, preview.sandpack-static-server.codesandbox.io, radix-ui.com, react.dev, vitejs.dev, www.w3.org

Source & flagged code

4 flagged · loading source
dist/cli/index.jsView file
1#!/usr/bin/env node L2: import { fork } from "node:child_process"; L3: import { openSync, readFileSync } from "node:fs";
High
Child Process

Package source references child process execution.

dist/cli/index.jsView on unpkg · L1
web/dist/assets/index-Dv2cHOEN.jsView file
8]|$)`},{atBreak:!0,character:"<",after:"[!/?A-Za-z]"},{character:"<",after:"[!/?A-Za-z]",inConstruct:"phrasing",notInConstruct:Ja},{character:"<",inConstruct:"destinationLiteral"},... L9: `)&&u.type==="html"&&(s[s.length-1]=s[s.length-1].replace(/(\r?\n|\r)$/," "),a=" ",c=e.createTracker(n),c.move(s.join("")));let f=e.handle(u,t,e,{...c.current(),after:h,before:a});... L10: `,after:` ... L20: `,now:{line:1,column:1},lineShift:0});return i&&i.charCodeAt(i.length-1)!==10&&i.charCodeAt(i.length-1)!==13&&(i+=` L21: `),i;function s(o){return r.stack.push(o),a;function a(){r.stack.pop()}}}function ZZ(t){throw new Error("Cannot handle value `"+t+"`, expected node")}function zZ(t){const e=t;throw... L22: ... L43: L44: `))}return r.pop(),a.join("")}function jI(t){let e=0,n=t.stack.length;for(;--n>-1;){const r=t.stack[n];if(r==="blockquote"||r==="listItem")break;r==="mdxJsxFlowElement"&&e++}return... L45: `));var e=[],n=t.split(/(\n|\r\n)/);n[n.length-1]||n.pop();for(var r=0;r<n.length;r++){var i=n[r];r%2&&!this.options.newlineIsToken?e[e.length-1]+=i:(this.options.ignoreWhitespace&... ... L147: `+t.slice(o+1):l+=t.slice(i),l.slice(1)}function jie(t){for(var e="",n=0,r,i=0;i<t.length;n
Critical
Download Execute

Source downloads or fetches remote code and executes it.

web/dist/assets/index-Dv2cHOEN.jsView on unpkg · L8
897} L898: `,aOe={defaultPreset:"react",presets:[{name:"react",meta:"live react",label:"React",sandpackTemplate:"react",sandpackTheme:"light",snippetFileName:"/App.js",snippetLanguage:"jsx",i... L899: `:r=="r"?"\r":r=="t"?" ":"\\")}eq(e){return this.search==e.search&&this.replace==e.replace&&this.caseSensitive==e.caseSensitive&&this.regexp==e.regexp&&this.wholeWord==e.wholeWord&...
High
Shell

Package source references shell execution.

web/dist/assets/index-Dv2cHOEN.jsView on unpkg · L897
web/dist/assets/livescript-BwQOo05w.jsView file
1var f=function(e,n){var g=n.next||"start";{n.next=n.next;var k=x[g];if(k.splice){for(var l=0;l<k.length;++l){var t=k[l];if(t.regex&&e.match(t.regex))return n.next=t.next||n.next,t....
Medium
Dynamic Require

Package source references dynamic require/import behavior.

web/dist/assets/livescript-BwQOo05w.jsView on unpkg · L1

Findings

1 Critical2 High4 Medium5 Low
CriticalDownload Executeweb/dist/assets/index-Dv2cHOEN.js
HighChild Processdist/cli/index.js
HighShellweb/dist/assets/index-Dv2cHOEN.js
MediumDynamic Requireweb/dist/assets/livescript-BwQOo05w.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings