ft-scout@5.0.3
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo malicious install hook or covert credential exfiltration was confirmed. However, the reachable dashboard command-injection and cross-origin data exposure are concrete critical vulnerabilities.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs `scout dashboard` or `ft dashboard` and the server remains running.
Impact
A malicious website or reachable client can execute commands as the user and read returned command output.
Mechanism
CORS-enabled HTTP API interpolates request data into a shell command.
AI rationale
No malicious install hook or covert credential exfiltration was confirmed. However, the reachable dashboard command-injection and cross-origin data exposure are concrete critical vulnerabilities.
Evidence
package.jsonbin/ft.jsbin/src/server/server.jsbin/src/commands/dashboard.jsbin/src/utils/email.jsbin/src/engine/agentEngine.js.ft/scan-report.json~/.ft/auth.json
Network endpoints1
localhost:9120
Decision evidence
public snapshotAI called this Suspicious at 96.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- bin/src/server/server.js:54 permits all origins.
- bin/src/server/server.js:133 accepts unauthenticated POST /api/cli/exec.
- bin/src/server/server.js:140-160 concatenates request input into child_process.exec.
- bin/src/server/server.js:69-88 returns auth config and workspace data cross-origin.
- bin/src/commands/dashboard.js starts this server on explicit dashboard use.
Evidence against
- package.json has no lifecycle hooks.
- bin/ft.js only dynamically imports the CLI entrypoint.
- Email code sends signup data to documented auth/email services; no general env harvesting was found.
- Agent shell/file actions have interactive confirmations in TTY mode.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3154else if (fs.existsSync(indexScript)) {
L155: execCmd = `npx tsx "${indexScript}" ${command}`;
L156: }
...
L159: }
L160: exec(execCmd, { cwd: process.cwd() }, (err, stdout, stderr) => {
L161: const output = (stdout || '') + (stderr || '');
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
bin/src/server/server.jsView on unpkg · L154bin/src/commands/agent.jsView file
15import { promisify } from 'util';
L16: const execAsync = promisify(exec);
L17: const FT_DIR = path.join(process.cwd(), '.ft');
High
bin/src/utils/email.jsView file
5import { FIREBASE_API_KEY, FIREBASE_TENANT_ID } from './firebaseAuth.js';
L6: const cwdEnv = path.resolve(process.cwd(), '.env');
L7: if (fs.existsSync(cwdEnv)) {
...
L80: </ul>
L81: <p>For more commands refer <a href="https://frontterrain.com/ft-scout">here</a></p><br>
L82: <p>Have any suggestion, feedback or need assistance we\'re always here on <a href="https://frontterrain.com/support">Help Center</a>
...
L94: /**
L95: * Create custom Nodemailer transport using process.env SMTP or fallback
L96: */
...
L142: },
L143: body: JSON.stringify({
L144: sender: { name: 'Scout Welcome', email: senderEmail },
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
bin/src/utils/email.jsView on unpkg · L55Trigger-reachable chain: manifest.bin -> bin/ft.js -> bin/src/index.js -> bin/src/commands/signup.js -> bin/src/utils/email.js
L5: import { FIREBASE_API_KEY, FIREBASE_TENANT_ID } from './firebaseAuth.js';
L6: const cwdEnv = path.resolve(process.cwd(), '.env');
L7: if (fs.existsSync(cwdEnv)) {
...
L80: </ul>
L81: <p>For more commands refer <a href="https://frontterrain.com/ft-scout">here</a></p><br>
L82: <p>Have any suggestion, feedback or need assistance we\'re always here on <a href="https://frontterrain.com/support">Help Center</a>
...
L94: /**
L95: * Create custom Nodemailer transport using process.env SMTP or fallback
L96: */
...
L142: },
L143: body: JSON.stringify({
L144: sender: { name: 'Scout Welcome', email: senderEmail },
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
bin/src/utils/email.jsView on unpkg · L55Trigger-reachable credential exfiltration chain: manifest.bin -> bin/ft.js -> bin/src/index.js -> bin/src/commands/signup.js -> bin/src/utils/email.js
L5: import { FIREBASE_API_KEY, FIREBASE_TENANT_ID } from './firebaseAuth.js';
L6: const cwdEnv = path.resolve(process.cwd(), '.env');
L7: if (fs.existsSync(cwdEnv)) {
...
L80: </ul>
L81: <p>For more commands refer <a href="https://frontterrain.com/ft-scout">here</a></p><br>
L82: <p>Have any suggestion, feedback or need assistance we\'re always here on <a href="https://frontterrain.com/support">Help Center</a>
...
L94: /**
L95: * Create custom Nodemailer transport using process.env SMTP or fallback
L96: */
...
L142: },
L143: body: JSON.stringify({
L144: sender: { name: 'Scout Welcome', email: senderEmail },
High
Trigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
bin/src/utils/email.jsView on unpkg · L5bin/src/commands/setup.jsView file
4import path from 'path';
L5: import { execSync } from 'child_process';
L6: import { safeNote } from '../utils/markdown.js';
...
L9: s.start('Diagnosing local runtime environment & dependencies...');
L10: const cwd = process.cwd();
L11: const passes = [];
...
L16: try {
L17: const checkCmd = process.platform === 'win32' ? `where ${cmd}` : `command -v ${cmd}`;
L18: execSync(checkCmd, { stdio: 'ignore', cwd });
...
L46: // Check 2: Node version check
L47: const pkgPath = path.join(cwd, 'package.json');
L48: if (fs.existsSync(pkgPath)) {
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/src/commands/setup.jsView on unpkg · L4front-terrain-cli-1.0.0.tgzView file
•path = front-terrain-cli-1.0.0.tgz
kind = high_entropy_blob
sizeBytes = 8643
magicHex = [redacted]
High
Ships High Entropy Blob
Package ships high-entropy non-source blobs.
front-terrain-cli-1.0.0.tgzView on unpkg•path = front-terrain-cli-1.0.0.tgz
kind = compressed_blob
sizeBytes = 8643
magicHex = [redacted]
Medium
Ships Compressed Blob
Package ships compressed or archive-like blobs.
front-terrain-cli-1.0.0.tgzView on unpkg•path = front-terrain-cli-1.0.0.tgz
kind = nested_archive_needs_inspection
sizeBytes = 8643
magicHex = [redacted]
Low
Nested Archive Needs Inspection
Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.
front-terrain-cli-1.0.0.tgzView on unpkgbin/src/engine/verifier.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = ft-scout@5.0.2
matchedIdentity = npm:ZnQtc2NvdXQ:5.0.2
similarity = 0.872
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/src/engine/verifier.jsView on unpkgweb/app.jsView file
6patternName = google_api_key
severity = high
line = 6
matchedText = apiKey: ...lg',
High
Findings
3 Critical9 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/engine/verifier.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
HighSecret Patternbin/src/utils/firebaseAuth.js
HighSecret Patternweb/app.js
MediumNetwork
MediumEnvironment Vars
MediumShips Compressed Blobfront-terrain-cli-1.0.0.tgz
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNested Archive Needs Inspectionfront-terrain-cli-1.0.0.tgz
Affected versions and remediation
This report applies to ft-scout@5.0.3.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@5.0.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.