registry / ocean-brain / 0.8.0
ocean-brain@0.8.0
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe lifecycle hook is package-aligned Prisma generation with fixed arguments, not a payload fetch or control-surface mutation. The flagged network and token handling implement an explicit, authenticated MCP client for the package's own server.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall; explicit ocean-brain serve or ocean-brain mcp command
Impact
Creates application data directories and generated Prisma artifacts; no exfiltration or foreign control-surface mutation established.
Mechanism
local Prisma generation and authenticated self-hosted note-service/MCP operation
AI rationale
The lifecycle hook is package-aligned Prisma generation with fixed arguments, not a payload fetch or control-surface mutation. The flagged network and token handling implement an explicit, authenticated MCP client for the package's own server.
Evidence
package.jsonscripts/postinstall-prisma.mjsdist/index.jsdist/mcp.jsserver/dist/modules/mcp-auth.jsserver/prisma/schema.prismaserver/dist/start.js
Network endpoints1
localhost:6683
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json postinstall only invokes bundled Prisma generation.
- scripts/postinstall-prisma.mjs uses execFileSync with fixed Prisma generate arguments.
- dist/index.js performs data-directory setup only after explicit ocean-brain serve.
- dist/mcp.js sends requests only to the user-selected Ocean Brain server.
- server/dist/modules/mcp-auth.js requires an enabled, valid bearer token for MCP writes.
- No foreign agent-config paths, credential harvesting, eval, or unconsented network endpoint found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
3 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/client/dist/assets/index-VHp17GQX.jsView file
341`);if(n.type==="error")throw n;return n.pinnedNotes}});return g.jsx(g.Fragment,{children:e.render(t)})},NS="focus-ring-soft flex h-8 w-8 items-center justify-center rounded-[10px] ...
L342: \0`,G+=s(L,2),G+=O.magic,G+=s(_,2),G+=s(S,2),G+=s(Y.crc32,4),G+=s(Y.compressedSize,4),G+=s(Y.uncompressedSize,4),G+=s(P.length,2),G+=s(I.length,2),{fileRecord:d.LOCAL_FILE_HEADER+G...
Low
Eval
Package source references a known benign dynamic code generation pattern.
server/client/dist/assets/index-VHp17GQX.jsView on unpkg · L341dist/index.jsView file
Findings
1 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalserver/client/dist/assets/index-VHp17GQX.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ocean-brain@0.8.0.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.8.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.