registry / scriptforge / 0.1.3

scriptforge@0.1.3

A local app store for utilities forged on demand with Codex.

AI Security Review

scanned 14h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

User starts Forge or Doctor, saves/runs a tool, or approves a Doctor proposal.

Impact

Can grant Codex trust to package-owned staging directories and run generated or approved local commands.

Mechanism

local Codex trust mutation and user-driven local process execution

Rationale

The source shows an explicit-user runtime mutation of Codex trust and local execution capability, so it warrants a warning under the agent-control policy. There is no concrete malicious chain or unconsented lifecycle mutation supporting a block.

Evidence

package.jsondist/cli.jsdist/mcp.jsdist/chunk-BC5J7UOP.jsdist/tools/video-downloader/run.mjs~/.codex/config.toml~/.scriptforge/staging~/.scriptforge/doctor~/.scriptforge/tools~/.scriptforge/jobs

Network endpoints1

127.0.0.1

scriptforge@0.1.3

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code