savant-code@0.0.33
Multi-Agent AI Coding Assistant with ECHO Protocol
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe launcher conditionally sends update-failure telemetry to a configured PostHog host, using the home-directory path as an identifying analytics ID. Because this disclosure occurs without a consent prompt and includes identifying local-path data, classify the package as suspicious telemetry; the environment configuration requirement lowers confidence that it affects typical installs.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI launch encounters a binary download or platform-check failure, and PostHog API key and host environment variables are set.
Impact
The home-directory path can identify the local account or machine in analytics records.
Mechanism
The launcher posts an event containing anonymous-${homeDir}, error details, version, platform, and architecture to the configured host's /capture/ path.
AI rationale
The launcher conditionally sends update-failure telemetry to a configured PostHog host, using the home-directory path as an identifying analytics ID. Because this disclosure occurs without a consent prompt and includes identifying local-path data, classify the package as suspicious telemetry; the environment configuration requirement lowers confidence that it affects typical installs.
Evidence
launcher.js
Network endpoints2
Configured host from SAVANT_CODE_POSTHOG_HOST or NEXT_PUBLIC_POSTHOG_HOST_URL, at /capture/github.com (default release downloads)
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- PostHog reporting activates only when both an API key and host are present in environment variables.
- The telemetry payload uses the home directory path as its distinct ID and includes error and runtime details.
- On update download failure, the launcher sends a telemetry event to the configured host's /capture/ endpoint.
- The package exposes a CLI; launcher.main runs when index.js is invoked as the command.
- The package scripts shown are prepack and postpack, not install hooks.
Evidence against
- Telemetry is inactive unless both PostHog environment settings are provided.
- The event is called on download and platform-check failures; no automatic install-time reporting was found.
- The launcher downloads release binaries from the project's GitHub releases by default.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
6 flaggedlauncher.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = savant-code@0.0.22
matchedIdentity = npm:c2F2YW50LWNvZGU:0.0.22
similarity = 0.667
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
launcher.jsView on unpkg2L3: const { spawn, execFileSync } = require('child_process')
L4: const crypto = require('crypto')
High
index.jsView file
2L3: const fs = require('fs')
L4: const path = require('path')
Medium
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltalauncher.js
HighChild Processlauncher.js
HighSame File Env Network Executionlauncher.js#virtual:normalized:round1
HighCommand Output Exfiltrationlauncher.js#virtual:normalized:round1
HighSemantic Analysis Limitedlauncher.js#virtual:normalized:round1
MediumDynamic Requireindex.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to savant-code@0.0.33.
See all versions of savant-code for other recorded verdicts.
- Review the evidence and your use of savant-code@0.0.33 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.