psyclaw@0.29.17
A standalone, evidence-grounded social-science research agent with research contracts, evidence gates, and recoverable workflows
AI Security Review
scanned 2mo ago · by lpm-firewall-aiSource inspection found no install-time execution, self-dependency chain, credential exfiltration, or unconsented foreign agent-control-surface mutation. The flagged files implement constrained runtime features or test fixtures, not a concrete attack.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
None during npm installation.
Impact
No confirmed malicious impact.
Mechanism
No confirmed automatic attack mechanism.
AI rationale
Source inspection found no install-time execution, self-dependency chain, credential exfiltration, or unconsented foreign agent-control-surface mutation. The flagged files implement constrained runtime features or test fixtures, not a concrete attack.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall hook; its only lifecycle hook is prepublishOnly.
- The flagged MCP transport is runtime code for a configured command, uses argument-vector spawning without a shell, and does not inherit the parent environment.
- The flagged vendor test file is ordinary pytest fixture code and contains no payload execution.
- The flagged TUI install path requires an explicit Y confirmation before calling the installer.
Evidence against
- The package provides user-invoked agent, plugin, and update functions that can install software or write project-local PsyClaw configuration.
- It ships a Windows fd.exe helper binary, but no source evidence tied it to automatic execution or malicious behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
6 flaggeddist/src/network-routing.jsView file
170const managerUrl = new URL("./utils/tools-manager.js", entryHref);
L171: const manager = await import(managerUrl.href);
L172: const failures = [];
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/src/network-routing.jsView on unpkg · L170vendor/windows/x64/fd.exeView file
•path = vendor/windows/x64/fd.exe
kind = native_binary
sizeBytes = 4104192
magicHex = [redacted]
Medium
vendor/ars/tools/release-discipline/scripts/sync-toolkit.shView file
Findings
3 High7 Medium5 Low
HighPayload In Excluded Dirvendor/ars/scripts/adapters/tests/conftest.py
HighSemantic Analysis Limiteddist/src/tui/app.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/src/integrations/mcp.js
MediumDynamic Requiredist/src/network-routing.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Native Binaryvendor/windows/x64/fd.exe
MediumShips Build Helpervendor/ars/tools/release-discipline/scripts/sync-toolkit.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
Low
Affected versions and remediation
This report applies to psyclaw@0.29.17.
See all versions of psyclaw for other recorded verdicts.
- Review the evidence and your use of psyclaw@0.29.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.