ft-scout@6.0.4
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo install lifecycle hook or concrete secret exfiltration was found, so the source does not support a malware verdict. The remote AI agent's noninteractive shell capability remains an unresolved dangerous capability.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the Scout agent command or invokes it in a noninteractive environment.
Impact
A compromised or prompt-injected model response could run arbitrary commands or alter the user workspace.
Mechanism
Remote model-directed workspace access, file editing, and shell execution.
AI rationale
No install lifecycle hook or concrete secret exfiltration was found, so the source does not support a malware verdict. The remote AI agent's noninteractive shell capability remains an unresolved dangerous capability.
Evidence
bin/src/engine/llm.jsbin/src/engine/agentEngine.js
Network endpoints1
frontterrain.com/api
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The agent sends its workspace conversation to a vendor AI endpoint and grants the returned model file-editing and shell-command tools.
- Shell-command confirmation is skipped when stdout is not a TTY, leaving a noninteractive agent run able to execute model-selected commands.
- The signup module loads a project .env file and can use its mail-service credentials, but only sends a welcome or verification message to the supplied signup address.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The mail function is reached from the explicit signup command, not at installation or import time.
- No source evidence sends harvested environment values or files to an attacker-controlled endpoint.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
15 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
3 Critical10 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/engine/verifier.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
HighSemantic Analysis Limitedbin/src/commands/agent.js#virtual:normalized:round1
Affected versions and remediation
This report applies to ft-scout@6.0.4.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@6.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.