modelence@0.26.0
The Node.js Framework for Real-Time MongoDB Apps
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe source shows a real project-level agent configuration mutation, but it is invoked by an explicit CLI command and not by an npm install hook. This warrants a warning under the agent extension policy, not a malware block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the modelence setup command.
Impact
A project gains an enabled Modelence Claude Code integration; this is a guarded agent-extension lifecycle risk rather than unconsented install-time behavior.
Mechanism
The CLI writes .claude/settings.json with a marketplace entry and enabled plugin before offering a separately confirmed Claude plugin installation.
AI rationale
The source shows a real project-level agent configuration mutation, but it is invoked by an explicit CLI command and not by an npm install hook. This warrants a warning under the agent extension policy, not a malware block.
Evidence
dist/bin/modelence.js.claude/settings.json
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The CLI setup flow modifies the project's Claude Code settings to register a marketplace and enable the Modelence plugin.
- That settings mutation runs during the explicit setup command before the separate interactive plugin-install prompt.
- The package scripts shown do not contain an npm install lifecycle hook.
Evidence against
- The configuration change is reached through an explicit CLI setup command, not package installation.
- Plugin installation through the Claude command is gated by an interactive confirmation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/bin/modelence.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = modelence@0.25.1
matchedIdentity = npm:bW9kZWxlbmNl:0.25.1
similarity = 0.917
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bin/modelence.jsView on unpkg1#!/usr/bin/env node
L2: import {Command}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import Q,{join,dirname,relative,isAbsolute,resol...
L3: `);}var H=".modelence.env";async function vt(e,t){let o="setupToken"in t?{"X-Modelence-Setup-Token":t.setupToken}:{Authorization:`Bearer ${t.cliToken}`},n=await fetch(`${e}/api/set...
High
Child Process
Package source references child process execution.
dist/bin/modelence.jsView on unpkg · L11#!/usr/bin/env node
L2: import {Command}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import Q,{join,dirname,relative,isAbsolute,resol...
L3: `);}var H=".modelence.env";async function vt(e,t){let o="setupToken"in t?{"X-Modelence-Setup-Token":t.setupToken}:{Authorization:`Bearer ${t.cliToken}`},n=await fetch(`${e}/api/set...
...
L6: Guide: ${kt}`;async function xt(){let e=join(process.cwd(),A),t;try{t=await promises.readFile(e,"utf8");}catch(n){if(n.code!=="ENOENT"){console.warn(`Could not read ${A}; leaving i...
L7: `),console.log(`Declared the Modelence Claude Code plugin in ${A}`);}catch(n){console.warn(`Failed to write ${A}:`,n);}}function W(e){return spawnSync("claude",e,{encoding:"utf8",s...
L8: `);if(await prom
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/bin/modelence.js
HighChild Processdist/bin/modelence.js
HighShell
HighSame File Env Network Executiondist/bin/modelence.js
HighHost Fingerprint Exfiltrationdist/chunk-3KNJR4AV.js
HighCommand Output Exfiltrationdist/bin/modelence.js
HighSandbox Evasion Gated Capabilitydist/bin/modelence.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/modelence.js
MediumDynamic Requiredist/chunk-3KNJR4AV.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to modelence@0.26.0.
See all versions of modelence for other recorded verdicts.
- Review the evidence and your use of modelence@0.26.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.