osborn@0.9.266
⚠ Under reviewVoice AI coding assistant - local agent that connects to Osborn frontend
AI Security Review
scanned 6h ago · by lpm-firewall-aiThe inspected package source did not establish malicious behavior, and its prepublishOnly hook only runs a build. The runtime depends on @livekit/agents, whose implementation could not be resolved here, so the review remains incomplete.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Using the package's runtime entrypoint.
Impact
The dependency's runtime behavior could not be assessed from the inspected source.
Mechanism
The entrypoint imports @livekit/agents, whose implementation was not available for this review.
AI rationale
The inspected package source did not establish malicious behavior, and its prepublishOnly hook only runs a build. The runtime depends on @livekit/agents, whose implementation could not be resolved here, so the review remains incomplete.
Evidence
package.jsondist/index.jsdist/claude-llm.js
Decision evidence
public snapshotAI called this Manual Review at 75.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest's prepublishOnly hook runs a build; no install hook is declared.
- The package declares @livekit/agents as a dependency and imports it in the runtime entrypoint, but its implementation was not available in the inspected source.
- The inspected Claude integration changes local compaction and cleanup settings in ~/.claude/settings.json at startup.
Evidence against
- The reviewed source shows no confirmed malicious transfer or other attack behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flagged · loading sourcebin/recall.jsView file
5L6: import { spawn } from 'child_process'
L7: import { fileURLToPath } from 'url'
High
dist/jsonl-search.jsView file
34// @vscode/ripgrep bundles the rg binary — this is our own dependency
L35: const { rgPath } = require('@vscode/ripgrep');
L36: if (rgPath && existsSync(rgPath))
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/jsonl-search.jsView on unpkg · L34dist/index.jsView file
2854const which = await new Promise((res) => {
L2855: const p = spawn('which', ['code-server']);
L2856: let out = '';
...
L2863: await new Promise((res, rej) => {
L2864: const install = spawn('sh', ['-c', 'curl -fsSL https://code-server.dev/install.sh | sh'], {
L2865: env: { ...process.env },
L2866: stdio: ['ignore', 'pipe', 'pipe'],
Findings
5 Critical3 High5 Medium5 Low
CriticalSame File Env Network Executiondist/index.js
CriticalCredential Exfiltrationdist/index.js
CriticalCommand Output Exfiltrationdist/index.js
CriticalDownload Executedist/index.js
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processbin/recall.js
HighShell
HighSemantic Analysis Limiteddist/noise-gate.js#virtual:normalized:round1
MediumDynamic Requiredist/jsonl-search.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperdeploy.sh
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to osborn@0.9.266.
See all versions of osborn for other recorded verdicts.
- Review the evidence and your use of osborn@0.9.266 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.