ft-scout@9.0.1
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis is a dangerous, user-invoked autonomous agent rather than confirmed install-time malware. Its broad shell, desktop, and email actions warrant a warning because they can have consequential effects under model or prompt compromise.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the scout agent or requests an app-control action.
Impact
A prompt-controlled model could alter workspace files, execute commands, or send email from an already authenticated Gmail session.
Mechanism
Autonomous agent with shell, file, desktop, screen, and Gmail automation.
AI rationale
This is a dangerous, user-invoked autonomous agent rather than confirmed install-time malware. Its broad shell, desktop, and email actions warrant a warning because they can have consequential effects under model or prompt compromise.
Evidence
bin/src/engine/agentEngine.jsbin/src/engine/appControl.js.ft/scratchpad.md
Network endpoints1
mail.google.com
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The user-invoked agent exposes shell execution, workspace editing, desktop control, and screen takeover.
- Its email action opens Gmail and automatically sends with Ctrl+Enter, with no separate approval in that action.
- The package loads environment variables for AI and email services, increasing the sensitivity of its broad agent capability.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- The risky behavior is reached through explicit CLI agent or app-control use, not during installation.
- The email utility is used by the signup flow to send a welcome message to the supplied address.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
17 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
3 Critical11 High5 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/commands/plan.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Installbin/src/server/server.js
HighShips High Entropy Blobfront-terrain-cli-1.0.0.tgz
Affected versions and remediation
This report applies to ft-scout@9.0.1.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@9.0.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.