savant-code@0.0.27
Multi-Agent AI Coding Assistant with ECHO Protocol
AI Security Review
scanned 3d ago · by lpm-firewall-aiThis is warning-level runtime telemetry: it is inactive without externally supplied PostHog settings, but when enabled it sends a home-directory-derived identifier and error details. The flagged process execution and default release download behavior serve the launcher’s stated purpose.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A download or platform error occurs while a PostHog API key and host are configured in the environment.
Impact
The configured analytics service can learn the local home-directory path and update error details.
Mechanism
The launcher posts an event containing a distinct ID derived from the home directory and the error message to the configured PostHog host.
AI rationale
This is warning-level runtime telemetry: it is inactive without externally supplied PostHog settings, but when enabled it sends a home-directory-derived identifier and error details. The flagged process execution and default release download behavior serve the launcher’s stated purpose.
Evidence
launcher.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The launcher sends PostHog events only when both an API key and host are provided through environment variables.
- The event includes the user’s home directory in its distinct ID and includes the update error message.
- The telemetry call runs on download failure and unsupported-platform errors.
- The package has no install lifecycle hook, and the CLI main function runs only when invoked directly.
Evidence against
- The telemetry host and API key are not set by the package, so this path is inactive unless configured externally.
- The Windows process execution probes CPU support; release downloads default to the project’s GitHub releases.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedlauncher.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = savant-code@0.0.22
matchedIdentity = npm:c2F2YW50LWNvZGU:0.0.22
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
launcher.jsView on unpkg2L3: const { spawn, execFileSync } = require('child_process')
L4: const crypto = require('crypto')
High
index.jsView file
2L3: const fs = require('fs')
L4: const path = require('path')
Medium
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltalauncher.js
HighChild Processlauncher.js
HighSame File Env Network Executionlauncher.js#virtual:normalized:round1
HighCommand Output Exfiltrationlauncher.js#virtual:normalized:round1
HighSemantic Analysis Limitedlauncher.js#virtual:normalized:round1
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to savant-code@0.0.27.
See all versions of savant-code for other recorded verdicts.
- Review the evidence and your use of savant-code@0.0.27 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.