dojofoo@0.0.5
Installable coding dojos that turn your AI agent into a sensei.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource confirms explicit first-party agent setup plus opt-out telemetry, but no npm lifecycle hook or concrete malicious chain. This warrants a warning for agent-extension lifecycle risk rather than a block.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
User runs `dojofoo install` or another CLI command that queues a course event.
Impact
Adds project-local agent command configuration; transmits event metadata and a generated instance ID.
Mechanism
Explicit AI-agent setup and opt-out telemetry.
AI rationale
Source confirms explicit first-party agent setup plus opt-out telemetry, but no npm lifecycle hook or concrete malicious chain. This warrants a warning for agent-extension lifecycle risk rather than a block.
Evidence
package.jsondist/index.js.agents/commands/dojo.md.agents/commands/kata.md.claude/settings.json.claude/commands/dojo.md.claude/commands/kata.md.codex/commands/dojo.md.codex/commands/kata.md.dojo/instance.json.dojo/registration-outbox.json.dojo/cassettes
Network endpoints1
dojofoo.vercel.app/api/v1/events
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `install` configures supported AI-agent command directories and Claude settings.
- Runtime telemetry POSTs event metadata to dojofoo.vercel.app unless disabled.
- `track` reads agent session logs only when explicitly invoked and saves a local cassette.
Evidence against
- package.json defines no preinstall, install, or postinstall hook.
- Agent setup occurs only through the user-invoked `install` command.
- No source evidence of credential harvesting, remote payload execution, or destructive behavior outside requested dojo operations.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationProtestware
Source & flagged code
11 flaggeddist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView file
2093}
L2094: exec(self, event) {
L2095: let shortcuts = this.callbacks.get(event.key);
High
Child Process
Package source references child process execution.
dist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView on unpkg · L20938109_createCanvas(width, height) {
L8110: return process.getBuiltinModule("module").createRequire(import.meta.url)("@napi-rs/canvas").createCanvas(width, height);
L8111: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/ui/server/_ssr/pdf-CjYZSQ3m.mjsView on unpkg · L8109dist/ui/server/_libs/@ai-sdk/provider-utils+[...].mjsView file
141try {
L142: new Function("");
L143: return true;
...
L484: success: true,
L485: data: result.value
L486: };
...
L791: const result = {};
L792: if (ctx.target === "draft-2020-12") result.$schema = "https://json-schema.org/draft/2020-12/schema";
L793: else if (ctx.target === "draft-07") result.$schema = "http://json-schema.org/draft-07/schema#";
...
L816: try {
L817: const finalized = JSON.parse(JSON.stringify(result));
L818: Object.defineProperty(finalized, "~standard", {
Findings
1 Critical7 High6 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/ui/server/_ssr/router-NefnYlnl.mjs
HighChild Processdist/ui/server/_ssr/pdf-CjYZSQ3m.mjs
HighShell
HighSame File Env Network Executiondist/index.js
HighCloud Metadata Accessdist/ui/server/_libs/@ai-sdk/provider-utils+[...].mjs
HighCross File Remote Execution Contextdist/ui/server/_ssr/router-NefnYlnl.mjs
HighSemantic Analysis Limiteddist/ui/public/assets/routes-4pk4PkvZ.js
HighKnown Malware Source Similaritydist/ui/public/assets/wardleyDiagram-T6FBY63Y-CbZLdOwO.js
MediumDynamic Requiredist/ui/server/_ssr/pdf-CjYZSQ3m.mjs
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to dojofoo@0.0.5.
See all versions of dojofoo for other recorded verdicts.
- Review the evidence and your use of dojofoo@0.0.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.