ft-scout@5.0.0
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete malicious behavior was established. The exposed autonomous command-and-write functionality remains a dangerous capability requiring a warning.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs ft/scout commands, particularly agent --run or code-generation workflows.
Impact
A user who authorizes agent actions can cause arbitrary local commands and project-file changes; source context may be sent to the vendor proxy.
Mechanism
Explicit-user command execution, project writes, and remote LLM analysis
AI rationale
No concrete malicious behavior was established. The exposed autonomous command-and-write functionality remains a dangerous capability requiring a warning.
Evidence
package.jsonbin/ft.jsbin/src/index.jsbin/src/commands/agent.jsbin/src/engine/verifier.jsbin/src/engine/llm.jsbin/src/commands/signup.jsbin/src/utils/email.js
Network endpoints4
frontterrain.com/apiidentitytoolkit.googleapis.comapi.brevo.com/v3/smtp/emailapi.resend.com/emails
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- bin/src/engine/verifier.js executes caller-supplied commands via child_process.
- bin/src/commands/agent.js can write generated edits into the current project.
- bin/src/engine/llm.js sends code-analysis prompts to FrontTerrain's LLM proxy.
Evidence against
- package.json has no preinstall/install/postinstall hooks.
- bin/ft.js only imports the CLI after explicit invocation.
- Signup sends user-entered credentials to Firebase and a welcome email, not harvested project secrets.
- The bundled .tgz is a readable prior CLI archive, not an opaque payload.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/utils/updateCheck.jsView file
5import { confirm, spinner, note } from '@clack/prompts';
L6: import { execSync } from 'child_process';
L7: const CACHE_FILE = path.join(os.homedir(), '.scout-update-cache.json');
High
Child Process
Package source references child process execution.
Findings
3 Critical9 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/engine/verifier.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/utils/updateCheck.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/utils/updateCheck.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
HighSecret Patternbin/src/utils/firebaseAuth.js
Affected versions and remediation
This report applies to ft-scout@5.0.0.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@5.0.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.