psyclaw@0.30.7
A standalone, evidence-grounded social-science research agent with research contracts, evidence gates, and recoverable workflows
AI Security Review
scanned 2mo ago · by lpm-firewall-aiStatic inspection found no npm install hook or self-dependency chain. The flagged test fixture is benign, and command execution requiring user interaction is consistent with the package's agent-management function.
Static reason
No blocking static signals were detected.
Trigger
A user runs the psyclaw CLI or confirms an agent installation in its TUI.
Impact
No unconsented install-time mutation, secret harvesting, or payload execution was found.
Mechanism
User-invoked bundled-runtime branding and confirmed agent setup.
AI rationale
Static inspection found no npm install hook or self-dependency chain. The flagged test fixture is benign, and command execution requiring user interaction is consistent with the package's agent-management function.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook; its only lifecycle-like script is prepublishOnly.
- The high-severity Python finding is ordinary pytest fixture code, not a hidden payload.
- The CLI rebrands its bundled runtime only when the user runs the psyclaw command.
- Agent installation is gated by an interactive confirmation and a y keystroke.
Evidence against
- The CLI modifies files in its bundled Pi dependency during explicit execution.
- Telemetry is enabled by default and uses package-aligned observability services.
- A Windows executable is shipped, but no source path inspected automatically launches it.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
5 flaggeddist/apps/panel/observability.jsView file
39async function loadEsm(url) {
L40: return import(url);
L41: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/apps/panel/observability.jsView on unpkg · L39vendor/windows/x64/fd.exeView file
•path = vendor/windows/x64/fd.exe
kind = native_binary
sizeBytes = 4104192
magicHex = [redacted]
Medium
vendor/ars/tools/release-discipline/scripts/sync-toolkit.shView file
Findings
2 High6 Medium6 Low
HighPayload In Excluded Dirvendor/ars/scripts/adapters/tests/conftest.py
HighSemantic Analysis Limiteddist/src/tui/app.js#virtual:normalized:round1
MediumDynamic Requiredist/apps/panel/observability.js
MediumNetwork
MediumEnvironment Vars
MediumShips Native Binaryvendor/windows/x64/fd.exe
MediumShips Build Helpervendor/ars/tools/release-discipline/scripts/sync-toolkit.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to psyclaw@0.30.7.
See all versions of psyclaw for other recorded verdicts.
- Review the evidence and your use of psyclaw@0.30.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.