negotium@0.19.2
Install the Negotium multi-agent runtime and CLI with one package
AI Security Review
scanned 14d ago · by lpm-firewall-aiThe configurable summary URL can receive a DeepSeek API key without destination validation, which creates a conditional credential exposure risk. The source does not establish covert theft or a malicious recipient, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A scheduled job is created with a prompt, and a summary key is available.
Impact
If the destination is configured to an unrelated host, the selected API key and prompt may be exposed there.
Mechanism
The summarizer selects NEGOTIUM_CRON_SUMMARY_API_KEY or DEEPSEEK_API_KEY, then uses NEGOTIUM_CRON_SUMMARY_URL when set and sends the key as a bearer credential.
AI rationale
The configurable summary URL can receive a DeepSeek API key without destination validation, which creates a conditional credential exposure risk. The source does not establish covert theft or a malicious recipient, so this warrants a warning rather than a block.
Evidence
dist/runtime/cron/summarize.tsdist/runtime/cron/mcp-server.ts
Network endpoints1
api.deepseek.com/v1/chat/completions
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Cron summaries use a dedicated summary key or fall back to the DeepSeek API key, and skip sending when no key or prompt is available.
- The request destination can be set with an environment variable, and the selected key is sent as a bearer credential without a destination allowlist.
- Creating a scheduled job with a prompt queues that prompt for summarization.
Evidence against
- The default summary endpoint is DeepSeek’s API, matching the default model.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node install-browser-rs.mjs && node install-bash-rs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install-browser-rs.mjs && node install-bash-rs.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/hosted-agent.jsView file
679if (isBun) {
L680: ({ Database } = await import("bun:sqlite"));
L681: } else {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/hosted-agent.jsView on unpkg · L679Findings
4 High6 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighCredential Redirect Persistencedist/mcp-factories.js
HighSemantic Analysis Limiteddist/query-runtime.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/browser-runtime.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/hosted-agent.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/runtime/scripts/faster-whisper-wrapper.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to negotium@0.19.2.
See all versions of negotium for other recorded verdicts.
- Review the evidence and your use of negotium@0.19.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.