modelence@0.26.2
The Node.js Framework for Real-Time MongoDB Apps
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe explicit setup command performs first-party, project-local Claude integration and prompts before plugin installation, warranting a warning under the agent integration policy. The inspected source does not support blocking or the claimed host data exfiltration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs `modelence setup` in a project.
Impact
The project is configured to use the Modelence Claude plugin if a user accepts its installation prompt.
Mechanism
Setup writes a Modelence marketplace and enabled-plugin entry to `.claude/settings.json`, then offers to run Claude's plugin installation commands.
AI rationale
The explicit setup command performs first-party, project-local Claude integration and prompts before plugin installation, warranting a warning under the agent integration policy. The inspected source does not support blocking or the claimed host data exfiltration.
Evidence
dist/bin/modelence.js
Network endpoints1
docs.modelence.com/ai-coding-agents
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes a `modelence setup` CLI command; Claude configuration changes are reached through that explicit command.
- Setup writes a project-local `.claude/settings.json` entry for the Modelence marketplace and plugin.
- The CLI asks before installing the first-party Modelence Claude plugin; declining ends that installation path.
- The package manifest has no install hook; `prepare` configures Git hooks.
Evidence against
- The inspected CLI flow supports package setup and a first-party Claude integration; it does not establish host identity exfiltration.
- The plugin installation requires an affirmative response, and no automatic npm-triggered Claude configuration mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
8 flaggeddist/bin/modelence.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = modelence@0.26.0
matchedIdentity = npm:bW9kZWxlbmNl:0.26.0
similarity = 0.958
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/bin/modelence.jsView on unpkg1#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import fe,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function Se(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Ot<=Date.now()?null:o.token}async function Pe(e...
High
Child Process
Package source references child process execution.
dist/bin/modelence.jsView on unpkg · L11#!/usr/bin/env node
L2: import {Command,Option}from'commander';import {readFileSync,promises,createWriteStream,openAsBlob}from'fs';import {fileURLToPath}from'url';import fe,{join,dirname,relative,isAbsolu...
L3: `,{mode:384});}async function Se(e){let{hosts:t={}}=await F(),o=t[e];return !o?.token||!o.expiresAt||new Date(o.expiresAt).getTime()-Ot<=Date.now()?null:o.token}async function Pe(e...
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/bin/modelence.js
HighChild Processdist/bin/modelence.js
HighShell
HighSame File Env Network Executiondist/bin/modelence.js
HighHost Fingerprint Exfiltrationdist/bin/modelence.js
HighCommand Output Exfiltrationdist/bin/modelence.js
HighSandbox Evasion Gated Capabilitydist/bin/modelence.js
HighTrigger Reachable Command Output Exfiltrationdist/bin/modelence.js
MediumDynamic Requiredist/chunk-4FJ7CJTX.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to modelence@0.26.2.
See all versions of modelence for other recorded verdicts.
- Review the evidence and your use of modelence@0.26.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.