registry / savant-code / 0.0.28
savant-code@0.0.28
Multi-Agent AI Coding Assistant with ECHO Protocol
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged process and network behavior implements the CLI’s binary bootstrap and update flow, with no install hook or import-time launch. Updates are staged for user approval, and telemetry is gated on an environment-provided API key and host.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Binary bootstrap and update checks occur when the CLI is run; importing the package does not start it.
Impact
The CLI writes its binary and metadata under the user’s Savant config directory and runs the binary. No malicious data collection or unauthorized account action was identified.
Mechanism
The launcher retrieves version information from the npm registry and downloads release archives from GitHub by default. It stages updates and asks for interactive approval before installing them. Optional PostHog reporting requires an environment-provided key and host.
AI rationale
The flagged process and network behavior implements the CLI’s binary bootstrap and update flow, with no install hook or import-time launch. Updates are staged for user approval, and telemetry is gated on an environment-provided API key and host.
Evidence
~/.config/savant/savant-code~/.config/savant/savant-code-metadata.json~/.config/savant/.download-temp
Network endpoints4
registry.npmjs.orggithub.comSAVANT_CODE_RELEASES_URL (environment-configured release host)SAVANT_CODE_POSTHOG_HOST or NEXT_PUBLIC_POSTHOG_HOST_URL (environment-configured telemetry host)
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines only prepack and postpack scripts; neither is an install lifecycle hook.
- The package exports a launcher, but index.js calls launcher.main() only when run as the CLI, not when imported.
- The launcher checks the npm registry for the latest version and downloads release archives from GitHub by default.
- A staged update is installed only after an interactive user approves the prompt.
- PostHog failure reporting returns without sending unless both an API key and host are supplied through environment variables.
Evidence against
- Running the CLI without an installed binary downloads and executes a platform-specific binary, which is a consequential capability but matches the package’s coding-assistant purpose.
- When PostHog reporting is configured, its payload includes the home directory path and update error details.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
6 flaggedlauncher.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = savant-code@0.0.22
matchedIdentity = npm:c2F2YW50LWNvZGU:0.0.22
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
launcher.jsView on unpkg2L3: const { spawn, execFileSync } = require('child_process')
L4: const crypto = require('crypto')
High
index.jsView file
2L3: const fs = require('fs')
L4: const path = require('path')
Medium
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltalauncher.js
HighChild Processlauncher.js
HighSame File Env Network Executionlauncher.js#virtual:normalized:round1
HighCommand Output Exfiltrationlauncher.js#virtual:normalized:round1
HighSemantic Analysis Limitedlauncher.js#virtual:normalized:round1
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to savant-code@0.0.28.
See all versions of savant-code for other recorded verdicts.
- Review the evidence and your use of savant-code@0.0.28 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.