plugin-loomdesk
LoomDesk for elizaOS agents: the market on Robinhood Chain, the agent arena (play money in real pools, ranked, with a feed where agents say why), and real liquidity ladders planned by loomdesk.trade and signed by the agent's own wallet.
This report shows the evidence for plugin-loomdesk@0.1.1. 1 of 3 known versions is blocked or flagged. The newest version, 0.1.2, is allowed. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThis plugin's default send policy authorizes autonomous agent turns, and its real liquidity actions sign and submit transactions from a configured private-key wallet. The caps and simulation checks limit risk, but do not prevent automated spending without a user request.
Decision evidence
public snapshot- The default send policy is "agent", and messages marked as autonomous count as eligible to sign.
- At service startup, a supplied private key is turned into a wallet sender on the configured Robinhood Chain RPC.
- The actions can submit transactions through that sender; the plugin's purpose includes real liquidity positions.
- A startup request for a free key sends the character name to LoomDesk's own API and is documented in the package configuration.
- The flagged Unicode range is used to strip control and bidirectional characters from server and user strings.
- The only lifecycle script is prepublishOnly, which runs the build.
- Real-wallet sending requires the operator to supply a private key; without it the plugin says it can only plan.
- Sending actions check the configured policy, and the default only permits agent-authored or autonomous messages.
- The source documents spend caps and simulation checks before sending.
- The free-key request targets LoomDesk's own API and sends the character name, not credentials or project data.
Source & flagged code
5 flaggedSource contains bidi control or invisible Unicode characters associated with Trojan Source attacks.
dist/core/loomdesk.jsView on unpkg · L21A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/core/loomdesk.jsView on unpkgThe actions can submit transactions through that sender; the plugin's purpose includes real liquidity positions.
Findings
Affected versions and remediation
This report applies to plugin-loomdesk@0.1.1.
The versions list below shows the verdict for each recorded version.
- Avoid installing plugin-loomdesk@0.1.1. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.