registry / fraim / 2.0.322

fraim@2.0.322

FRAIM core CLI and MCP package.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

Source inspection found no install-time execution or concrete attack behavior. The flagged telemetry and agent setup paths are reached through FRAIM commands and use a loopback metrics receiver and FRAIM-named integration files.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

A user invokes FRAIM setup, project initialization, IDE addition, or doctor commands.

Impact

The inspected behavior supports local usage tracking; no malicious transfer or agent control abuse was established.

Mechanism

Setup fills missing Claude telemetry settings and the receiver binds to loopback to collect token-usage metrics.

AI rationale

Evidence

~/.claude/settings.json~/.claude/skills/fraim/SKILL.md~/.claude/commands/fraim.md

Network endpoints1

localhost:4318

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json names the CLI entrypoints and ends without a lifecycle script; index.js dispatches to the packaged CLI.
Claude token telemetry is enabled through FRAIM setup commands, which fill missing user settings with a localhost endpoint.
The OTLP receiver binds to loopback and parses Claude token-usage metrics.
Agent integration uses FRAIM-named skill and command files, with setup and sync performed through FRAIM flows.
The flagged utility paths contain repository checks, doctor diagnostics, configuration handling, and marketplace validation; inspection found no attack behavior.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 190 file(s), 1.95 MB of source, external domains: 127.0.0.1, accounts.google.com, ai.google.dev, antigravity.google, api.anthropic.com, api.dicebear.com, api.github.com, api.githubcopilot.com, api.stripe.com, app.seekout.com, cdn.jsdelivr.net, chatgpt.com, checkout.stripe.com, claude.ai, code.visualstudio.com, cursor.com, design.claude.ai, dev.azure.com, docs.github.com, docs.gitlab.com, docs.microsoft.com, fonts.googleapis.com, fonts.gstatic.com, fraim.wellnessatwork.me, fraimworks.ai, github.com, gitlab.com, hooks.stripe.com, id.atlassian.com, js.stripe.com, kiro.dev, nodejs.org, oauth2.googleapis.com, openai.com, support.atlassian.com, support.claude.com, windsurf.com, www.anthropic.com, www.claude.ai, www.fraimworks.ai, www.indeed.com, www.linkedin.com, www.python.org, x.ai

Source & flagged code

18 flagged

dist/src/core/utils/git-utils.jsView file

Lines 1-29javascript

1"use strict";

2Object.defineProperty(exports, "__esModule", { value: true });

3exports.isExplicitLocalRepoPath = isExplicitLocalRepoPath;

4exports.getPort = getPort;

5exports.determineDatabaseName = determineDatabaseName;

6exports.getCurrentGitBranch = getCurrentGitBranch;

7exports.determineSchema = determineSchema;

8exports.getDefaultBranch = getDefaultBranch;

9exports.sanitizeRepoIdentifier = sanitizeRepoIdentifier;

10const child_process_1 = require("child_process");

11function extractLocalFolderLabel(rawPath) {

High

Child Process

Package source references child process execution.

dist/src/core/utils/git-utils.jsView on unpkg · L9

12 const normalized = rawPath

13 .trim()

14 .replace(/^file:\/\//i, '')

15 .replace(/\\/g, '/')

16 .replace(/\/+$/, '');

17 if (!normalized)

18 return undefined;

19 const parts = normalized.split('/').filter(Boolean);

20 const candidate = parts[parts.length - 1];

21 return candidate || undefined;

22}

23function isExplicitLocalRepoPath(repoUrl) {

24 if (!repoUrl || typeof repoUrl !== 'string') {

25 return false;

26 }

27 const trimmed = repoUrl.trim();

28 return (trimmed.startsWith('/') ||

29 trimmed.startsWith('\\') ||

dist/src/cli/doctor/checks/scripts-checks.jsView file

Lines 215-255javascript

215 * Check Python availability, guarding against the Windows App Execution Alias.

216 * On Windows, bare `python`/`python3` are aliased to the Microsoft Store installer

217 * when Python is not installed. This check uses the `py` launcher (not aliased)

218 * as

bin/fraim.jsView file

Lines 1-14javascript

1#!/usr/bin/env node

3try {

4 require('../dist/src/cli/fraim.js');

5} catch (error) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/fraim.jsView on unpkg · L3

6 if (error && error.code

dist/src/first-run/session-service.jsView file

Lines 26-66javascript

26 };

27 return function (mod) {

28 if (mod && mod.__esModule) return mod;

29 var result = {};

30 if

dist/src/cli/commands/override.jsView file

Lines 1-30javascript

1"use strict";

2var __importDefault = (this && this.__importDefault) || function (mod) {

3 return (mod && mod.__esModule) ? mod :

dist/src/cli/setup/user-level-sync.jsView file

Lines 113-153javascript

113 pkg = JSON.parse(fs_1.default.readFileSync(pkgPath, 'utf8'));

114 }

115 catch {

116 // Corrupt package.json — overwrite below rather than crash.

117 pkg = {};

dist/src/cli/utils/managed-agent-install.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/src/cli/utils/managed-agent-install.js#virtual:normalized:round1View on unpkg

index.jsView file

•matchType = normalized_sha256 matchedPackage = fraim@2.0.183 matchedPath = index.js matchedIdentity = npm:ZnJhaW0:2.0.183 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High