registry / dirac-lang / 0.1.93

dirac-lang@0.1.93

LLM-Augmented Declarative Execution

AI Security Review

scanned 8d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs dirac/dish CLI, starts the agent, or executes a Dirac program using dangerous tags.

Impact

Dirac programs or LLM-generated code can execute shell commands, write files, call configured LLM/network endpoints, and schedule tasks under user control.

Mechanism

user-invoked scripting and AI-agent execution primitives

Policy narrative

A user can run the CLI or shell and execute Dirac programs that use <system>, <eval>, <llm execute="true">, cron, or the agent daemon. These are powerful package-aligned features, but inspection did not find lifecycle delivery, credential harvesting, exfiltration, persistence outside the documented ~/.dirac area, or mutation of foreign AI-agent control surfaces.

Rationale

Source inspection supports a warning for dangerous user-invoked AI scripting capabilities, not a malicious package block. The suspicious scanner findings are real primitives but are package-aligned and not triggered during install or import.

Evidence

package.jsondist/cli.jsdist/chunk-SYFYHKKI.jsdist/shell-IYJJWIQR.jsdist/agent-AQDM6UOR.jslib/ai.dilib/shell-init.di~/.dirac/config.yml~/.dirac/shell-init.di~/.dirac/lib/user~/.dirac/lib/{timestamp}~/.dirac/session.pid~/.dirac/agent.log~/.dirac_history

Network endpoints3

localhost:11434/api/generatelocalhost:5001/chat{host}:{port}/api/embeddings

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

dist/chunk-SYFYHKKI.js implements <system> using child_process exec/spawn with shell/background support.
dist/chunk-SYFYHKKI.js implements <eval> via AsyncFunction with fs/path/session context.
lib/ai.di defines an ai helper that calls <llm execute="true">, allowing LLM-generated Dirac code execution.
dist/agent-AQDM6UOR.js user-invoked agent start creates ~/.dirac pid/log files and a detached daemon.

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks.
dist/cli.js only activates shell, agent, or file execution from explicit CLI commands.
No code writes Claude/Codex/Cursor/MCP or other foreign AI-agent control surfaces.
Network calls are LLM/embedding provider features using configured OpenAI/Anthropic/local/custom endpoints.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 242 KB of source

Source & flagged code

5 flagged

dist/chunk-SYFYHKKI.jsView file

Lines 279-319javascript

279 name = element.attributes.name || element.attributes.subroutine || "";

280 } else {

281 name = element.tag;

282 }

283 if (!name) {

284 throw new Error("<call> requires name or subroutine attribute");

285 }

286 const subroutine = getSubroutine(session, name);

287 if (!subroutine) {

288 throw new Error(`Subroutine '${name}' not found`);

289 }

290 const extendAttr = subroutine.attributes.extend;

291 const extendsAttr = subroutine.attributes.extends;

292 if (extendAttr !== void 0 || extendsAttr !== void 0) {

293 const baseSubroutine = await registerExtendChain(session, subroutine, name);

294 await executeCallInternal(session, baseSubroutine, element, true);

295 } else {

296 await executeCallInternal(session, subroutine, element, false);

297 }

298}

299async function registerExtendChain(session, subroutine, currentName) {

300 const { executeSubroutine: executeSubroutine2 } = await import("./subroutine-7JJKHTV4.js");

301 const extendsAttr = subroutine.attributes.extends;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-SYFYHKKI.jsView on unpkg · L299

302 let parentName;

303 if (extendsAttr) {

304 parentName = extendsAttr;

305 } else {

306 parentName = currentName;

307 }

308 const parent = getParentSubroutine(session, parentName, parentName === currentName ? subroutine : void 0);

309 if (!parent) {

310 return subroutine;

311 }

312 const parentExtendAttr = parent.attributes.extend;

313 const parentExtendsAttr = parent.attributes.extends;

314 let baseSubroutine;

315 if (parentExtendAttr !== void 0 || parentExtendsAttr !== void 0) {

316 baseSubroutine = await registerExtendChain(session, parent, parentName);

317 } else {

318 for (const child of parent.children) {

319 if (child.tag === "subroutine") {

Lines 1597-1639javascript

1597 result = args.length > 0 ? args[0] === 0 : true;

1598 break;

1599 case "same":

1600 case "strcmp":

1601 result = stringArgs.

•matchType = previous_version_dangerous_delta matchedPackage = dirac-lang@0.1.94 matchedIdentity = npm:ZGlyYWMtbGFuZw:0.1.94 similarity = 0.957 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-SYFYHKKI.jsView on unpkg

dist/shell-IYJJWIQR.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

2import {

3 BraKetParser,

4 integrate

5} from "./chunk-SYFYHKKI.js";

6import "./chunk-ECAW4X46.js";

7import "./chunk-SLGJRZ3P.js";

8import {

9 DiracParser

Source & flagged code

5 flagged · loading source

dist/chunk-SYFYHKKI.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-SYFYHKKI.jsView on unpkg

1617// src/tags/system.ts L1618: import { exec, spawn } from "child_process"; L1619: import { promisify } from "util";

High

Child Process

Package source references child process execution.

dist/chunk-SYFYHKKI.jsView on unpkg · L1617

1619import { promisify } from "util"; L1620: var execAsync = promisify(exec); L1621: async function executeSystem(session, element) {

High

Shell

Package source references shell execution.

dist/chunk-SYFYHKKI.jsView on unpkg · L1619

299async function registerExtendChain(session, subroutine, currentName) { L300: const { executeSubroutine: executeSubroutine2 } = await import("./subroutine-7JJKHTV4.js"); L301: const extendsAttr = subroutine.attributes.extends;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-SYFYHKKI.jsView on unpkg · L299

dist/shell-IYJJWIQR.jsView file

20Cross-file remote execution chain: dist/shell-IYJJWIQR.js spawns dist/chunk-SYFYHKKI.js; helper contains network access plus dynamic code execution. L20: import yaml from "js-yaml"; L21: var HISTORY_FILE = path.join(os.homedir(), ".dirac_history"); L22: var MAX_HISTORY = 1e3; ... L41: input: process.stdin, L42: output: process.stdout, L43: prompt: "> ", ... L86: ]; L87: const envVarNames = Object.keys(process.env).filter( L88: (name) => commonEnvVars.includes(name) || name.startsWith("DIRAC_") || name.startsWith("TELEGRAM_") ... L588: try { L589: formattedValue = JSON.stringify(JSON.parse(v.value), null, 2); L590: } catch {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/shell-IYJJWIQR.jsView on unpkg · L20

Findings

1 Critical3 High3 Medium3 Low

CriticalPrevious Version Dangerous Deltadist/chunk-SYFYHKKI.js

HighChild Processdist/chunk-SYFYHKKI.js

HighShelldist/chunk-SYFYHKKI.js

HighCross File Remote Execution Contextdist/shell-IYJJWIQR.js

MediumDynamic Requiredist/chunk-SYFYHKKI.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

5 flagged

dist/chunk-SYFYHKKI.jsView file

Lines 279-319javascript

279 name = element.attributes.name || element.attributes.subroutine || "";

280 } else {

281 name = element.tag;

282 }

283 if (!name) {

284 throw new Error("<call> requires name or subroutine attribute");

285 }

286 const subroutine = getSubroutine(session, name);

287 if (!subroutine) {

288 throw new Error(`Subroutine '${name}' not found`);

289 }

290 const extendAttr = subroutine.attributes.extend;

291 const extendsAttr = subroutine.attributes.extends;

292 if (extendAttr !== void 0 || extendsAttr !== void 0) {

293 const baseSubroutine = await registerExtendChain(session, subroutine, name);

294 await executeCallInternal(session, baseSubroutine, element, true);

295 } else {

296 await executeCallInternal(session, subroutine, element, false);

297 }

298}

299async function registerExtendChain(session, subroutine, currentName) {

300 const { executeSubroutine: executeSubroutine2 } = await import("./subroutine-7JJKHTV4.js");

301 const extendsAttr = subroutine.attributes.extends;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-SYFYHKKI.jsView on unpkg · L299

302 let parentName;

303 if (extendsAttr) {

304 parentName = extendsAttr;

305 } else {

306 parentName = currentName;

307 }

308 const parent = getParentSubroutine(session, parentName, parentName === currentName ? subroutine : void 0);

309 if (!parent) {

310 return subroutine;

311 }

312 const parentExtendAttr = parent.attributes.extend;

313 const parentExtendsAttr = parent.attributes.extends;

314 let baseSubroutine;

315 if (parentExtendAttr !== void 0 || parentExtendsAttr !== void 0) {

316 baseSubroutine = await registerExtendChain(session, parent, parentName);

317 } else {

318 for (const child of parent.children) {

319 if (child.tag === "subroutine") {

Lines 1597-1639javascript

1597 result = args.length > 0 ? args[0] === 0 : true;

1598 break;

1599 case "same":

1600 case "strcmp":

1601 result = stringArgs.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/chunk-SYFYHKKI.jsView on unpkg

dist/shell-IYJJWIQR.jsView file

Lines 1-40javascript

1#!/usr/bin/env node

2import {

3 BraKetParser,

4 integrate

5} from "./chunk-SYFYHKKI.js";

6import "./chunk-ECAW4X46.js";

7import "./chunk-SLGJRZ3P.js";

8import {

9 DiracParser