registry / savant-code / 0.0.29
savant-code@0.0.29
Multi-Agent AI Coding Assistant with ECHO Protocol
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package has no install-time hook, and the flagged shell commands are examples embedded in design resources. The launcher downloads and runs the CLI’s release binary, while staged updates are presented for user approval; no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI; update checks follow startup.
Impact
Expected CLI operation and updates; no source evidence of credential theft or unrelated data collection.
Mechanism
The launcher retrieves release metadata from npm and downloads the project’s release binary from GitHub (or a configured replacement host), then runs the CLI binary. Staged updates require interactive approval before installation.
AI rationale
The package has no install-time hook, and the flagged shell commands are examples embedded in design resources. The launcher downloads and runs the CLI’s release binary, while staged updates are presented for user approval; no concrete attack behavior was found.
Evidence
.config/savant
Network endpoints2
registry.npmjs.orggithub.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install hook; its scripts run at pack time.
- The CLI entry point runs the launcher only when invoked as the main module.
- The launcher downloads release binaries from the project’s GitHub releases; an environment variable allows a custom release host.
- Update checks stage newer binaries and tell the user they will be installed on a later launch; applying a staged update interactively asks for consent.
- The flagged curl-and-shell commands appear in design analysis resources as UI install-snippet examples, not executed package code.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedlauncher.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = savant-code@0.0.22
matchedIdentity = npm:c2F2YW50LWNvZGU:0.0.22
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
launcher.jsView on unpkg2L3: const { spawn, execFileSync } = require('child_process')
L4: const crypto = require('crypto')
High
index.jsView file
2L3: const fs = require('fs')
L4: const path = require('path')
Medium
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltalauncher.js
HighChild Processlauncher.js
HighSame File Env Network Executionlauncher.js#virtual:normalized:round1
HighCommand Output Exfiltrationlauncher.js#virtual:normalized:round1
HighSemantic Analysis Limitedlauncher.js#virtual:normalized:round1
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to savant-code@0.0.29.
See all versions of savant-code for other recorded verdicts.
- Review the evidence and your use of savant-code@0.0.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.