savant-code@0.0.30
Multi-Agent AI Coding Assistant with ECHO Protocol
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe launcher’s release download and execution fit the CLI’s purpose, and telemetry requires host and key settings. However, failure reporting includes the local home-directory path and is not clearly disclosed, so this warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI binary download or staging failure, when both telemetry environment settings are present.
Impact
The configured analytics endpoint can receive a locally identifying filesystem path and error details without a clear telemetry disclosure in the package README.
Mechanism
The launcher posts the error message and a distinct ID derived from the home directory to the configured PostHog host.
AI rationale
The launcher’s release download and execution fit the CLI’s purpose, and telemetry requires host and key settings. However, failure reporting includes the local home-directory path and is not clearly disclosed, so this warrants a warning rather than a block.
Evidence
launcher.js
Network endpoints3
Configured by SAVANT_CODE_POSTHOG_HOST or NEXT_PUBLIC_POSTHOG_HOST_URL; path /capture/registry.npmjs.orggithub.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On update failures, the launcher sends a telemetry event containing `anonymous-${CONFIG.homeDir}` and the error message.
- Telemetry is sent to `/capture/` on a host taken from environment variables when both a host and API key are present.
- The telemetry call is reached when binary download or staging fails.
Evidence against
- The package has no install lifecycle hook; its declared scripts are prepack and postpack.
- The launcher’s release download is for the project’s own GitHub release and runs only when the CLI is invoked.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedlauncher.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = savant-code@0.0.22
matchedIdentity = npm:c2F2YW50LWNvZGU:0.0.22
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
launcher.jsView on unpkg2L3: const { spawn, execFileSync } = require('child_process')
L4: const crypto = require('crypto')
High
index.jsView file
2L3: const fs = require('fs')
L4: const path = require('path')
Medium
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltalauncher.js
HighChild Processlauncher.js
HighSame File Env Network Executionlauncher.js#virtual:normalized:round1
HighCommand Output Exfiltrationlauncher.js#virtual:normalized:round1
HighSemantic Analysis Limitedlauncher.js#virtual:normalized:round1
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to savant-code@0.0.30.
See all versions of savant-code for other recorded verdicts.
- Review the evidence and your use of savant-code@0.0.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.