ft-scout@5.0.2
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection confirms a serious user-triggered RCE exposure, not malicious install-time behavior or confirmed exfiltration. The scanner's credential-exfiltration label is not supported by the signup-only email implementation.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs `scout dashboard`, `scout web-ui`, or `scout gui`.
Impact
Remote code execution with the CLI user's permissions and workspace access.
Mechanism
Unauthenticated CORS-enabled shell command execution.
AI rationale
Source inspection confirms a serious user-triggered RCE exposure, not malicious install-time behavior or confirmed exfiltration. The scanner's credential-exfiltration label is not supported by the signup-only email implementation.
Evidence
package.jsonbin/src/index.jsbin/src/commands/dashboard.jsbin/src/server/server.jsbin/src/utils/email.jsbin/src/commands/signup.js
Network endpoints1
localhost:9120
Decision evidence
public snapshotAI called this Suspicious at 97.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- `bin/src/server/server.js` exposes unauthenticated `/api/cli/exec`.
- The endpoint enables `Access-Control-Allow-Origin: *` and passes request command text to `exec`.
- `dashboard` explicitly starts this server; `server.listen(port)` has no loopback host restriction.
- `bin/src/utils/email.js` loads the current project's `.env` during CLI module import.
Evidence against
- `package.json` has no preinstall/install/postinstall lifecycle hook.
- The command-execution server is activated only by explicit `dashboard`/`web-ui`/`gui` use.
- Email network calls are limited to a user signup welcome/verification flow; no secret payload is sent to an attacker endpoint.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = ft-scout@5.0.1
matchedIdentity = npm:ZnQtc2NvdXQ:5.0.1
similarity = 0.842
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
Findings
3 Critical9 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/server/server.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
HighSecret Patternbin/src/utils/firebaseAuth.js
Affected versions and remediation
This report applies to ft-scout@5.0.2.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@5.0.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.