dojofoo@0.0.3
Installable coding dojos that turn your AI agent into a sensei.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo lifecycle hook or unconsented install-time foreign control-surface mutation was found. The explicit agent configuration and local session-log capture warrant a warning under the AI-agent capability policy.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
User runs `dojofoo install` or `dojofoo track`.
Impact
Can alter selected project agent command surfaces and locally duplicate session content; no confirmed session-content exfiltration.
Mechanism
Project-local agent setup, optional session-log recording, and course telemetry.
AI rationale
No lifecycle hook or unconsented install-time foreign control-surface mutation was found. The explicit agent configuration and local session-log capture warrant a warning under the AI-agent capability policy.
Evidence
package.jsondist/index.js.agents/commands.codex/commands.claude/settings.json.dojo/cassettes
Network endpoints1
dojofoo.vercel.app/api/v1/events
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `install` setup configures selected AI-agent project directories.
- Setup creates agent command/skill links and writes Claude permissions.
- `track` can read detected local agent session logs and save normalized copies.
- Telemetry posts course-event metadata to dojofoo unless disabled.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Agent configuration and session capture require explicit CLI commands.
- No source evidence sends session-log contents or credentials over the network.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestwareTelemetry
Source & flagged code
10 flaggeddist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView file
2093}
L2094: exec(self, event) {
L2095: let shortcuts = this.callbacks.get(event.key);
High
Child Process
Package source references child process execution.
dist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView on unpkg · L20938109_createCanvas(width, height) {
L8110: return process.getBuiltinModule("module").createRequire(import.meta.url)("@napi-rs/canvas").createCanvas(width, height);
L8111: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView on unpkg · L8109dist/ui/server/_libs/@ai-sdk/provider-utils+[...].mjsView file
141try {
L142: new Function("");
L143: return true;
...
L484: success: true,
L485: data: result.value
L486: };
...
L791: const result = {};
L792: if (ctx.target === "draft-2020-12") result.$schema = "https://json-schema.org/draft/2020-12/schema";
L793: else if (ctx.target === "draft-07") result.$schema = "http://json-schema.org/draft-07/schema#";
...
L816: try {
L817: const finalized = JSON.parse(JSON.stringify(result));
L818: Object.defineProperty(finalized, "~standard", {
Findings
7 High6 Medium7 Low
HighChild Processdist/ui/server/_ssr/pdf-CjYZSQ3m.mjs
HighShell
HighSame File Env Network Executiondist/index.js
HighCloud Metadata Accessdist/ui/server/_libs/@ai-sdk/provider-utils+[...].mjs
HighCross File Remote Execution Contextdist/ui/server/_ssr/router-B7WOYyZr.mjs
HighSemantic Analysis Limiteddist/ui/public/assets/routes-4pk4PkvZ.js
HighKnown Malware Source Similaritydist/ui/public/assets/wardleyDiagram-T6FBY63Y-CbZLdOwO.js
MediumDynamic Requiredist/ui/server/_ssr/pdf-CjYZSQ3m.mjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumOversized Source Filedist/ui/server/_libs/shikijs__langs.mjs
Affected versions and remediation
This report applies to dojofoo@0.0.3.
See all versions of dojofoo for other recorded verdicts.
- Review the evidence and your use of dojofoo@0.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.