ft-scout@1.1.0
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is not malicious by the install-hook or credential-exfiltration evidence inspected, but it provides a high-impact autonomous shell capability without containment. Treat it as a dangerous dual-use CLI and warn rather than block publication.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the scout agent command or supplies its command-execution option.
Impact
An unsafe prompt or compromised model response could run commands with the invoking user's permissions.
Mechanism
Agent-directed local shell execution and workspace modification.
AI rationale
The package is not malicious by the install-hook or credential-exfiltration evidence inspected, but it provides a high-impact autonomous shell capability without containment. Treat it as a dangerous dual-use CLI and warn rather than block publication.
Evidence
bin/src/index.jsbin/src/engine/runtime/agentRuntime.jsbin/src/utils/email.jsbin/src/engine/web.js.ft
Network endpoints4
api.brevo.comapi.tavily.comgoogle.serper.devhtml.duckduckgo.com
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit agent command exposes autonomous file editing and shell-command execution.
- The runtime passes agent-supplied command text directly to a child-process shell.
- The email helper reads local environment settings and can send a welcome message through configured email providers.
- The web helper sends a user query to configured search services.
Evidence against
- package.json has no preinstall, install, postinstall, or self-dependency.
- The email request body is a welcome template addressed to the supplied signup email, not harvested files or environment contents.
- The shipped archive lists an older transparent CLI source tree; no install path executes it.
- No source path found that automatically exfiltrates credentials or mutates agent configuration at installation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
17 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
2 Critical12 High5 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSame File Env Network Executionbin/src/utils/holoseneAuth.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
Affected versions and remediation
This report applies to ft-scout@1.1.0.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@1.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.