ft-scout@9.0.6
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThis release is not malicious by the available source evidence, but its user-invoked autonomous execution and dependency-install features create unresolved high-impact risk. It should be warned rather than blocked.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs scout agent or scout setup.
Impact
A model-directed command or a dependency lifecycle script can modify the user's project or execute code.
Mechanism
AI-directed shell execution and automatic dependency installation.
AI rationale
This release is not malicious by the available source evidence, but its user-invoked autonomous execution and dependency-install features create unresolved high-impact risk. It should be warned rather than blocked.
Evidence
bin/src/index.jsbin/src/engine/agentEngine.jsbin/src/commands/setup.jsbin/src/engine/computer/computerController.jsbin/src/utils/email.jspackage.jsonnode_modules/.env
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The explicit agent command can ask its model to run arbitrary shell commands in the current project.
- The setup command automatically runs the detected package manager's install command against the project.
- A bundled Windows driver can be executed for computer-control actions.
- Email support loads the current project's .env file when the signup module is imported.
Evidence against
- package.json has no preinstall, install, postinstall, or self-dependency.
- The email sender is reached only from the explicit signup flow and sends a welcome message to the supplied account email.
- No source evidence shows automatic secret exfiltration, stealth persistence, or install-time project mutation.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
18 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
3 Critical12 High5 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/engine/agentEngine.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSame File Env Network Executionbin/src/utils/holoseneAuth.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Install
Affected versions and remediation
This report applies to ft-scout@9.0.6.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@9.0.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.