droid@0.223.0
Factory Droid CLI - AI-powered software engineering agent
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a Factory CLI native-binary installer in the esbuild style: postinstall only prepares the local droid binary from same-version @factory optional packages or registry.npmjs.org. Credential use is limited to npmjs.org requests, and no foreign agent control surface or hidden payload path appears in the inspected scripts.
Decision evidence
public snapshot- postinstall runs install.js to hard-link or symlink the package's own bin/droid to a matching @factory/cli platform optional dependency
- If that binary is missing, install.js downloads the same version's tarball from registry.npmjs.org and writes only package/bin inside this package
- NPM_TOKEN is attached only when the request hostname includes npmjs.org
- The global-install PATH helper only prints shell advice and does not write profiles or agent config
- The droid bin spawns the selected platform binary with the caller's arguments
Source & flagged code
7 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time source downloads a native archive from a fixed external host without transport verification, extracts it, and installs an executable payload.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
Findings
Affected versions and remediation
This report applies to droid@0.223.0.
See all versions of droid for other recorded verdicts.
- Review the evidence and your use of droid@0.223.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.