registry / AI-agent capability abuse / linkgravity / 1.5.13

linkgravity@1.5.13

Discord/Telegram bot bridge for the Antigravity (agy) CLI, with voice interaction support

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No concrete stealth, install-time, or foreign broad-control-surface mutation was found. The package nevertheless exposes a high-impact agent-control capability and sends voice data to a third-party STT endpoint.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

User runs lgy setup, configures a messenger, and starts the daemon

Impact

Authorized or broadly permitted messenger users can cause agy tasks; voice audio leaves the host for STT.

Mechanism

Remote messenger-to-agent bridge with approval hook

AI rationale

Evidence

bin/setup.jsnpm-scripts/register-hook.jssrc/core/agy_runner.pyhooks/hook.pyvoice-service/stt.js.gemini/config/hooks.json.gemini/linkgravity/lgy.json.gemini/antigravity-cli/brain

Network endpoints2

localhost:18080/approvewww.google.com/speech-api/v2/recognize

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Bot launches agy with permission skipping
Explicit setup can register agy approval hooks
Voice feature posts audio to Google STT

Evidence against

No preinstall/install/postinstall hook
Hook registration requires setup confirmation
Approval hook is enabled only for bot-launched agy
Local approval API requires a token

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 95.2 KB of source, external domains: 127.0.0.1, github.com, www.google.com

Source & flagged code

6 flagged

voice-service/stt.jsView file

Lines 1-25javascript

1const { spawn } = require('child_process');

2const ffmpegPath = require('ffmpeg-static');

4// Unofficial Google STT key - same default Python's SpeechRecognition (recognize_google) ships with.

5const GOOGLE_STT_KEY = 'AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw';

High

High Secret

Package contains a high-severity secret pattern.

voice-service/stt.jsView on unpkg · L5

High

Secret Pattern

Google API key in voice-service/stt.js

voice-service/stt.jsView on unpkg · L5

7function flacEncode(wavBuffer) {

8 return new Promise((resolve, reject) => {

9 const ff = spawn(ffmpegPath, [

10 '-hide_banner',

11 '-loglevel',

12 'error',

13 '-i',

14 'pipe:0',

15 '-f',

16 'flac',

17 'pipe:1',

18 ]);

19 const out = [];

20 ff.stdout.on('data', (d) => out.push(d));

21 ff.stderr.on('data', () => {}); // -loglevel error already keeps this quiet in the normal case

22 ff.on('error', (err) => reject(new Error(`ffmpeg-static failed to run (${err.message})`)));

23 ff.on('close', (code) => {

24 if (code !== 0) return reject(new Error(`ffmpeg exited with code ${code}`));

25 resolve(Buffer.concat(out));

•matchType = normalized_sha256 matchedPackage = linkgravity@1.5.3 matchedPath = voice-service/stt.js matchedIdentity = npm:bGlua2dyYXZpdHk:1.5.3 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

voice-service/stt.jsView on unpkg

npm-scripts/ensure-env.jsView file

Lines 1-21javascript

1'use strict';

2const { execSync } = require('child_process');

3const os = require('os');

High

Child Process

Package source references child process execution.

npm-scripts/ensure-env.js

bin/cli.js#virtual:normalized:round1View file

34L35: // Resolved rather than run through npx: pm2 is a direct dependency, and npx wraps it in L36: // "npm execsh -c", which leaves the real process orphaned when we try to kill it. L37: const PM2_BIN = require.resolve("pm2/bin/pm2");

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.js#virtual:normalized:round1View on unpkg · L34

hooks/hook.pyView file

•path = hooks/hook.py kind = build_helper sizeBytes = 2343 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/hook.pyView on unpkg

Source & flagged code

6 flagged · loading source

voice-service/stt.jsView file

5patternName = google_api_key severity = high line = 5 matchedText = const GO...gw';

High

High Secret

Package contains a high-severity secret pattern.

voice-service/stt.jsView on unpkg · L5

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

voice-service/stt.jsView on unpkg

5patternName = google_api_key severity = high line = 5 matchedText = const GO...gw';

High

Secret Pattern

Google API key in voice-service/stt.js

voice-service/stt.jsView on unpkg · L5

npm-scripts/ensure-env.js

Findings

6 High4 Medium5 Low

HighHigh Secretvoice-service/stt.js

HighChild Processnpm-scripts/ensure-env.js

HighShell

HighRuntime Package Installbin/cli.js#virtual:normalized:round1

HighKnown Malware Source Similarityvoice-service/stt.js

HighSecret Patternvoice-service/stt.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperhooks/hook.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to linkgravity@1.5.13.

See all versions of linkgravity for other recorded verdicts.

Review the evidence and your use of linkgravity@1.5.13 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-15 20:14:24.370Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code