psyclaw@0.30.22
⚠ Under reviewA standalone, evidence-grounded social-science research agent with research contracts, evidence gates, and recoverable workflows
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe inspected excerpts show no concrete attack, but they do not cover the required bundled runtime source set needed to establish a clean verdict. Further source review is needed to resolve that coverage gap.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was established in the inspected excerpts.
Impact
No concrete attack impact was established; the incomplete source coverage prevents a clean assessment.
Mechanism
The reviewed launcher invokes a local rebranding script, and the reviewed package-manager methods handle command results; broader runtime behavior remains unassessed.
AI rationale
The inspected excerpts show no concrete attack, but they do not cover the required bundled runtime source set needed to establish a clean verdict. Further source review is needed to resolve that coverage gap.
Decision evidence
public snapshotAI called this Manual Review at 48.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest’s scripts include a prepublish build; the inspected excerpt does not establish an install hook.
- Plugin setup checks that a recommendation is installable and has a source reference before proceeding.
- The inspected launcher starts the rebranding script with shell execution disabled.
- The inspected dependency methods report command failures and exit status.
Evidence against
- The required clean-review paths include a broad bundled runtime set that was not fully inspected, so a clean verdict is not established.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/apps/panel/observability.jsView file
39async function loadEsm(url) {
L40: return import(url);
L41: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/apps/panel/observability.jsView on unpkg · L39vendor/windows/x64/fd.exeView file
•path = vendor/windows/x64/fd.exe
kind = native_binary
sizeBytes = 4104192
magicHex = [redacted]
Medium
vendor/ars/tools/release-discipline/scripts/sync-toolkit.shView file
Findings
3 High6 Medium6 Low
HighPayload In Excluded Dirvendor/ars/scripts/adapters/tests/conftest.py
HighSemantic Analysis Limiteddist/src/tui/app.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/src/chat.js
MediumDynamic Requiredist/apps/panel/observability.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryvendor/windows/x64/fd.exe
MediumShips Build Helpervendor/ars/tools/release-discipline/scripts/sync-toolkit.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to psyclaw@0.30.22.
See all versions of psyclaw for other recorded verdicts.
- Review the evidence and your use of psyclaw@0.30.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.