ft-scout@5.0.1
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource supports a warning for broad, user-invoked execution capability, not a block for malware. Scanner claims of credential exfiltration are not substantiated by the inspected email flow.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs scout setup or scout agent.
Impact
A user can cause dependency installation or an autonomous agent to run commands in the selected workspace.
Mechanism
User-invoked shell execution and workspace mutation
AI rationale
Source supports a warning for broad, user-invoked execution capability, not a block for malware. Scanner claims of credential exfiltration are not substantiated by the inspected email flow.
Evidence
package.jsonbin/src/commands/setup.jsbin/src/engine/agentEngine.jsbin/src/utils/email.jsbin/src/commands/signup.js
Network endpoints4
registry.npmjs.org/api.brevo.com/v3/smtp/emailapi.resend.com/emailsidentitytoolkit.googleapis.com/v1/accounts
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- bin/src/commands/setup.js runs dependency installers in the current project.
- bin/src/engine/agentEngine.js exposes an LLM tool that executes shell commands.
- bin/src/utils/email.js loads cwd .env and uses SMTP/API credentials on signup.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Credentialed email code is reached only by explicit signup and sends to the supplied address.
- No source evidence of secret collection followed by an attacker-controlled exfiltration request.
- Bundled .tgz is a small source archive, not an executable payload.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
15 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/utils/holoseneAuth.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = ft-scout@5.0.0
matchedIdentity = npm:ZnQtc2NvdXQ:5.0.0
similarity = 0.838
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
Findings
4 Critical9 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalBrowser Phishing Redirectweb/app.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/utils/holoseneAuth.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/utils/holoseneAuth.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/utils/updateCheck.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
Affected versions and remediation
This report applies to ft-scout@5.0.1.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@5.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.