negotium@0.1.12
Install the Negotium multi-agent runtime and CLI with one package
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe package is a CLI/runtime with powerful but explicit user-invoked features. Source inspection found no lifecycle execution, stealth persistence, foreign AI-agent control-surface mutation, or unconsented credential/data exfiltration.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `negotium cron` or another explicit CLI command.
Impact
User-selected cron scripts can execute with the invoking user's permissions; no unconsented execution or credential exfiltration was found.
Mechanism
User-configured local agent runtime, cron scripts, and optional prompt summarization.
AI rationale
The package is a CLI/runtime with powerful but explicit user-invoked features. Source inspection found no lifecycle execution, stealth persistence, foreign AI-agent control-surface mutation, or unconsented credential/data exfiltration.
Evidence
package.jsondist/main.jsdist/cron.jsdist/chunk-jzz91jwh.jsdist/chunk-edb07sjp.jsdist/chunk-tcs9qjps.jsdist/chunk-8f2sqmrj.js
Network endpoints1
api.deepseek.com/v1/chat/completions
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- `dist/cron.js` can run a user-selected Python cron job.
- `dist/cron.js` optionally POSTs cron prompt text to DeepSeek when an API key is configured.
Evidence against
- `package.json` has no preinstall/install/postinstall lifecycle hook.
- `dist/main.js` only dispatches behavior after explicit CLI subcommands.
- `dist/cron.js` confines script names to `.py` files beneath its cron jobs directory.
- `dist/cron.js` uses argument-based `spawn`, with output and timeout limits.
- `dist/chunk-jzz91jwh.js` mutates only a Negotium-local MCP manifest after explicit `mcp` commands.
- `dist/chunk-tcs9qjps.js` checks agent-auth file existence without reading its contents.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourcedist/cron.jsView file
886async forkSession({ parentSessionId, cwd, title }) {
L887: const { forkSession } = await import("@anthropic-ai/claude-agent-sdk");
L888: const result = await forkSession(parentSessionId, {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/cron.jsView on unpkg · L886dist/runtime/scripts/faster-whisper-wrapper.pyView file
•path = dist/runtime/scripts/faster-whisper-wrapper.py
kind = build_helper
sizeBytes = 2704
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
dist/runtime/scripts/faster-whisper-wrapper.pyView on unpkgdist/chunk-8f2sqmrj.jsView file
Findings
1 High5 Medium4 Low
HighPrevious Version Dangerous Deltadist/chunk-8f2sqmrj.js
MediumDynamic Requiredist/cron.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/runtime/scripts/faster-whisper-wrapper.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to negotium@0.1.12.
See all versions of negotium for other recorded verdicts.
- Review the evidence and your use of negotium@0.1.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.