caitlyn@0.3.0
CAITLYN Security Guardian Agent — interactive defense agent for LLM agent protection
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/scanner.jsView file
13*/
L14: import { spawn } from "node:child_process";
L15: import * as fs from "node:fs";
High
dist/scripts/tier0-worker.mjsView file
37try {
L38: const mod = await import(pathToFileURL(file).href);
L39: if (typeof mod.detect === "function") detectors.set(id, mod.detect);
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/scripts/tier0-worker.mjsView on unpkg · L37dist/sync/update.jsView file
4* Discovery source of truth: GitHub release tag.
L5: * Apply path for v1: npm install of the configured package.
L6: */
L7: import { spawnSync } from "node:child_process";
L8: import * as fs from "node:fs";
Findings
4 High5 Medium5 Low
HighChild Processdist/scanner.js
HighShell
HighRuntime Package Installdist/sync/update.js
HighSemantic Analysis Limiteddist/adapters/registry.js#virtual:normalized:round1
MediumDynamic Requiredist/scripts/tier0-worker.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperextension/caitlyn-helpers.py
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to caitlyn@0.3.0.
See all versions of caitlyn for other recorded verdicts.
- Review the evidence and your use of caitlyn@0.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.