ft-scout@9.2.0
FrontTerrain — The Onboarding Co-Pilot for New Codebases
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe dashboard is user-started and has no install hook, but its API runs shell commands and returns the auth session with no authentication, wildcard CORS, and a hardcoded admin secret. That is a concrete critical vulnerability in the running local server, not a proven install-time malware chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs the dashboard command, which calls startDashboardServer and listens on localhost.
Impact
A page or local client can run package CLI commands in the project directory, start autonomous agent work, and read stored login tokens while the dashboard process is up.
Mechanism
POST /api/cli/exec shells the request body through node and the package CLI. POST /api/agent/task starts AgentExecutionLoop with the supplied autoApprove flag. GET /api/status returns authConfig. Admin verification treats scout_admin_2026 as valid.
AI rationale
The dashboard is user-started and has no install hook, but its API runs shell commands and returns the auth session with no authentication, wildcard CORS, and a hardcoded admin secret. That is a concrete critical vulnerability in the running local server, not a proven install-time malware chain.
Evidence
bin/src/server/server.jsbin/src/utils/admin.jsbin/src/commands/dashboard.js
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Critical Vulnerability with medium false-positive risk.
Evidence for warning
- The dashboard HTTP server accepts POST /api/cli/exec with no authentication, interpolates the request command into a shell string, and runs it with child_process exec in the current working directory.
- Every dashboard response sets Access-Control-Allow-Origin to * and allows private-network requests, so a remote page can call the local server while the dashboard is running.
- GET /api/status returns the stored auth object, including session tokens, with no authentication check.
- POST /api/agent/task starts an autonomous agent loop and honors the caller autoApprove flag with no authentication check.
- Admin checks accept the hardcoded fallback secret scout_admin_2026 as a valid admin key or bearer token.
Evidence against
- package.json defines only test and build scripts, with no preinstall, install, or postinstall hook.
- The server listens only after the user runs the dashboard command, which calls startDashboardServer on localhost.
- Command execution and agent start are product features of the local dashboard, not an install-time payload.
Behavioral surface
Source & flagged code
18 flaggedbin/src/utils/firebaseAuth.jsView file
1patternName = google_api_key
severity = high
line = 1
High
High Secret
Package contains a high-severity secret pattern.
bin/src/utils/firebaseAuth.jsView on unpkg · L11patternName = google_api_key
severity = high
line = 1
High
Secret Pattern
Google API key in bin/src/utils/firebaseAuth.js
bin/src/utils/firebaseAuth.jsView on unpkg · L1bin/src/server/server.jsView file
3import path from 'path';
L4: import { exec } from 'child_process';
L5: import { fileURLToPath } from 'url';
High
Child Process
Package source references child process execution.
bin/src/server/server.jsView on unpkg · L3Findings
3 Critical12 High5 Medium5 Low
CriticalCredential Exfiltrationbin/src/utils/email.js
CriticalTrigger Reachable Dangerous Capabilitybin/src/utils/email.js
CriticalPrevious Version Dangerous Deltabin/src/engine/agentEngine.js
HighHigh Secretbin/src/utils/firebaseAuth.js
HighChild Processbin/src/server/server.js
HighShellbin/src/commands/agent.js
HighSame File Env Network Executionbin/src/utils/holoseneAuth.js
HighSandbox Evasion Gated Capabilitybin/src/commands/setup.js
HighRemote Agent Bridgebin/src/engine/agentEngine.js
HighTrigger Reachable Credential Exfiltrationbin/src/utils/email.js
HighRuntime Package Install
Affected versions and remediation
This report applies to ft-scout@9.2.0.
See all versions of ft-scout for other recorded verdicts.
- Review the evidence and your use of ft-scout@9.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.