ft-scout@5.0.4
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource confirms a critical reachable RCE/auth-disclosure server, but it is activated only by an explicit command and there is no install-time behavior or concrete evidence of malicious intent.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User runs `scout dashboard` while the server remains active.
Impact
A reachable requester can obtain stored tokens/configuration and run shell-injected commands in the current workspace.
Mechanism
Unauthenticated CORS-enabled dashboard command execution and auth disclosure.
AI rationale
Source confirms a critical reachable RCE/auth-disclosure server, but it is activated only by an explicit command and there is no install-time behavior or concrete evidence of malicious intent.
Evidence
bin/src/server/server.jsbin/src/commands/dashboard.jsbin/src/utils/auth.jsbin/src/engine/agentEngine.js~/.ft/auth.jsonbin/ft.jsbin/src/index.js
Network endpoints1
localhost:9120
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.
Evidence for warning
- Dashboard enables wildcard CORS and exposes the complete auth configuration.
- Unauthenticated dashboard API interpolates supplied command text into child_process.exec.
- Dashboard listens without a loopback host restriction.
- Agent feature can write files and execute commands when explicitly invoked.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The vulnerable server starts only through the explicit dashboard command.
- Email code is called from the explicit signup flow and sends welcome-email content, not harvested env values.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
matchedText = export c...lg';
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
2 Critical10 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighEntrypoint Foreign Package Code Overwritebin/src/commands/init.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
HighSecret Patternbin/src/utils/firebaseAuth.js
Affected versions and remediation
This report applies to ft-scout@5.0.4.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@5.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.