dojofoo@0.0.4
Installable coding dojos that turn your AI agent into a sensei.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNot malicious by static source evidence: sensitive behavior is explicit CLI functionality, not lifecycle execution. Warn because it writes cross-agent command surfaces and can copy local agent transcripts.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
User runs `npx dojofoo install --<agent>` or `npx dojofoo track`.
Impact
Can alter selected project agent command surfaces and copy conversation/tool records into the project; no confirmed exfiltration of those records.
Mechanism
Explicit project agent-command setup and local session-log recording.
AI rationale
Not malicious by static source evidence: sensitive behavior is explicit CLI functionality, not lifecycle execution. Warn because it writes cross-agent command surfaces and can copy local agent transcripts.
Evidence
package.jsondist/index.js.agents/commands/dojo.md.agents/commands/kata.md.claude/commands/dojo.md.claude/commands/kata.md.claude/settings.json.codex/commands/dojo.md.dojo/cassettes
Network endpoints1
dojofoo.vercel.app/api/v1/events
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Explicit install configures project directories for five coding-agent platforms.
- Install writes agent command symlinks and Claude settings.
- `track` locates agent session logs and saves normalized conversations locally.
- CLI telemetry posts course-event metadata to dojofoo.vercel.app unless disabled.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- All agent configuration and session capture require an explicit CLI command.
- No source evidence sends captured session contents or credentials over the network.
- Child-process use supports requested test, editor, package, and UI commands.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
11 flaggeddist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView file
2093}
L2094: exec(self, event) {
L2095: let shortcuts = this.callbacks.get(event.key);
High
Child Process
Package source references child process execution.
dist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView on unpkg · L20938109_createCanvas(width, height) {
L8110: return process.getBuiltinModule("module").createRequire(import.meta.url)("@napi-rs/canvas").createCanvas(width, height);
L8111: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView on unpkg · L8109dist/ui/server/_libs/@ai-sdk/provider-utils+[...].mjsView file
141try {
L142: new Function("");
L143: return true;
...
L484: success: true,
L485: data: result.value
L486: };
...
L791: const result = {};
L792: if (ctx.target === "draft-2020-12") result.$schema = "https://json-schema.org/draft/2020-12/schema";
L793: else if (ctx.target === "draft-07") result.$schema = "http://json-schema.org/draft-07/schema#";
...
L816: try {
L817: const finalized = JSON.parse(JSON.stringify(result));
L818: Object.defineProperty(finalized, "~standard", {
Findings
1 Critical7 High6 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/ui/public/assets/chunk-JQJVKLGR-Bpb64wf1.js
HighChild Processdist/ui/server/_ssr/pdf-CjYZSQ3m.mjs
HighShell
HighSame File Env Network Executiondist/index.js
HighCloud Metadata Accessdist/ui/server/_libs/@ai-sdk/provider-utils+[...].mjs
HighCross File Remote Execution Contextdist/ui/server/_ssr/router-B7WOYyZr.mjs
HighSemantic Analysis Limiteddist/ui/public/assets/routes-4pk4PkvZ.js
HighKnown Malware Source Similaritydist/ui/public/assets/wardleyDiagram-T6FBY63Y-CbZLdOwO.js
MediumDynamic Requiredist/ui/server/_ssr/pdf-CjYZSQ3m.mjs
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to dojofoo@0.0.4.
See all versions of dojofoo for other recorded verdicts.
- Review the evidence and your use of dojofoo@0.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.