negotium@0.21.3
Install the Negotium multi-agent runtime and CLI with one package
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe install-time network and filesystem behavior is package-aligned tool setup with pinned versions and SHA-256 checks. The inspected agent integration locations do not show a confirmed attack, and the scanner hints alone do not establish credential redirection or command-output exfiltration.
Static reason
One or more suspicious static signals were detected.
Trigger
The npm postinstall hook runs during installation.
Impact
This supports ordinary tool setup; no confirmed attack surface was established in the inspected paths.
Mechanism
It invokes the browser and bash installers, which fetch version-pinned release assets and check their SHA-256 digests before writing them to the package's state directory.
AI rationale
The install-time network and filesystem behavior is package-aligned tool setup with pinned versions and SHA-256 checks. The inspected agent integration locations do not show a confirmed attack, and the scanner hints alone do not establish credential redirection or command-output exfiltration.
Evidence
install-browser-rs.mjsinstall-bash-rs.mjs
Network endpoints2
github.com/maestrojeong/browser-rs-mcp/releases/download/v0.7.4github.com/maestrojeong/bash-rs-mcp/releases/download/v0.1.10
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs two explicit postinstall installers for the package's browser and bash tools.
- Both installers fetch pinned release assets and verify SHA-256 before installing them under the Negotium state directory.
- The required agent-integration locations show paths, rollout handling, and scoped Codex environment setup; these excerpts do not establish an unconsented foreign agent-control write.
- The query runtime excerpt shows a normal bundled module import.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node install-browser-rs.mjs && node install-bash-rs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install-browser-rs.mjs && node install-bash-rs.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/hosted-agent.jsView file
50// ../../packages/core/src/agents/claude-provider.ts
L51: import { spawn as spawn2 } from "child_process";
L52: import { existsSync, readFileSync as readFileSync2 } from "fs";
High
Child Process
Package source references child process execution.
dist/hosted-agent.jsView on unpkg · L50Findings
5 High6 Medium4 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/hosted-agent.js
HighCredential Redirect Persistencedist/mcp-factories.js
HighCommand Output Exfiltrationdist/main.js
HighSemantic Analysis Limiteddist/query-runtime.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/hosted-agent.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdist/runtime/scripts/faster-whisper-wrapper.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to negotium@0.21.3.
See all versions of negotium for other recorded verdicts.
- Review the evidence and your use of negotium@0.21.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.