droid@0.218.2
Factory Droid CLI - AI-powered software engineering agent
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe lifecycle downloader is a transparent, package-aligned fallback for the CLI’s declared platform dependencies and writes only within this package. Static inspection found no exfiltration, arbitrary remote execution chain, self-dependency, persistence, or broad consumer-project mutation.
Decision evidence
public snapshot- A postinstall hook runs install.js.
- If a platform dependency is absent, the installer downloads its platform binary and writes it under its own bin directory.
- The only fixed registry endpoint is registry.npmjs.org; no arbitrary command-and-control endpoint is present.
- The installer limits its auth header to npmjs.org and uses the token only for the registry request.
- Its filesystem changes replace or link only the package’s bin/droid shim.
- The manifest has no runtime dependency on droid itself and no broad project, shell-profile, credential, or agent-config mutation was found.
Source & flagged code
6 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
Findings
Affected versions and remediation
This report applies to droid@0.218.2.
See all versions of droid for other recorded verdicts.
- Review the evidence and your use of droid@0.218.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.