ft-scout@7.0.8
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a dangerous, user-invoked agent capability rather than concrete malicious install behavior. It warrants a warning because the exposed tool set is broad and lacks a reliable policy boundary.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Running scout agent with a goal, especially with automatic approval or in a non-interactive environment.
Impact
A malicious prompt or untrusted workspace content could cause command execution, file changes, screen capture, or actions in other applications.
Mechanism
Autonomous LLM tool dispatch with shell and desktop-control primitives.
AI rationale
This is a dangerous, user-invoked agent capability rather than concrete malicious install behavior. It warrants a warning because the exposed tool set is broad and lacks a reliable policy boundary.
Evidence
bin/src/index.jsbin/src/engine/agentEngine.jsbin/src/engine/appControl.js.ft/screenshots
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The explicit agent command exposes autonomous code editing, shell execution, and app-control features.
- Model tool calls are dispatched directly after the model returns them.
- The shell tool runs arbitrary command strings and skips confirmation when automatic approval is enabled or no terminal is present.
- Desktop automation can capture screens and inject keyboard input into other applications.
Evidence against
- The manifest contains no install lifecycle hook or self-dependency.
- These capabilities are reached through the user-invoked scout agent command, not package installation.
- The examined email code sends a welcome message only after an explicit signup flow; no secret-harvesting exfiltration was found.
- The bundled archive is not referenced by the inspected source.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
16 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
3 Critical11 High4 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/engine/agentEngine.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
Affected versions and remediation
This report applies to ft-scout@7.0.8.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@7.0.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.