registry / ocean-brain / 0.8.1
ocean-brain@0.8.1
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe lifecycle child process is a package-aligned local Prisma generate operation. Networked MCP functionality is explicitly user-invoked, targets a configured server, and requires bearer authentication for writes.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall or explicit ocean-brain serve/mcp command
Impact
No unconsented exfiltration, persistence, or foreign AI-agent control-surface mutation established.
Mechanism
local Prisma generation and authenticated requests to configured Ocean Brain server
AI rationale
The lifecycle child process is a package-aligned local Prisma generate operation. Networked MCP functionality is explicitly user-invoked, targets a configured server, and requires bearer authentication for writes.
Evidence
package.jsonscripts/postinstall-prisma.mjsdist/index.jsdist/mcp.jsserver/dist/start.jsserver/dist/modules/mcp-auth.jsserver/prisma/schema.prismaserver/dist/modules/prisma-runtime.js
Network endpoints1
localhost:6683
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json postinstall only invokes bundled Prisma generation.
- scripts/postinstall-prisma.mjs resolves Prisma locally and runs prisma generate.
- dist/index.js starts server only on explicit CLI invocation.
- dist/mcp.js sends requests only to user-selected server, defaulting to localhost.
- MCP write tools require an explicitly supplied bearer token.
- No AI-agent config writes, credential harvesting, remote payload loading, or eval found in inspected server/CLI source.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
3 flaggedpackage.jsonView file
•scripts.postinstall = node ./scripts/postinstall-prisma.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgserver/client/dist/assets/index-BR05aSXr.jsView file
341`);if(n.type==="error")throw n;return n.pinnedNotes}});return g.jsx(g.Fragment,{children:e.render(t)})},NS="focus-ring-soft flex h-8 w-8 items-center justify-center rounded-[10px] ...
L342: \0`,G+=s(L,2),G+=O.magic,G+=s(_,2),G+=s(S,2),G+=s(Y.crc32,4),G+=s(Y.compressedSize,4),G+=s(Y.uncompressedSize,4),G+=s(P.length,2),G+=s(I.length,2),{fileRecord:d.LOCAL_FILE_HEADER+G...
Low
Eval
Package source references a known benign dynamic code generation pattern.
server/client/dist/assets/index-BR05aSXr.jsView on unpkg · L341dist/index.jsView file
Findings
1 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEvalserver/client/dist/assets/index-BR05aSXr.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to ocean-brain@0.8.1.
See all versions of ocean-brain for other recorded verdicts.
- Review the evidence and your use of ocean-brain@0.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.