registry / siesa-agents / 2.1.107
siesa-agents@2.1.107
Paquete para instalar y configurar agentes SIESA en tu proyecto
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe automatic lifecycle setup creates an agent extension lifecycle risk because it copies agent assets without first requiring an explicit setup command. The inspected OAuth flow uses Atlassian endpoints and local token storage; no concrete attack behavior was established.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package runs its postinstall hook.
Impact
Agent configuration and assets may be added or updated during package installation; the affected scope depends on the lifecycle working directory.
Mechanism
The installer copies mapped package assets into target directories and clones a Siesa design repository into the target working directory.
AI rationale
The automatic lifecycle setup creates an agent extension lifecycle risk because it copies agent assets without first requiring an explicit setup command. The inspected OAuth flow uses Atlassian endpoints and local token storage; no concrete attack behavior was established.
Evidence
package.jsonbin/install.jsbin/folder-mappings.js.github.claude.gemini.mcp.json_bmad-output/design-artifacts
Network endpoints1
github.com/SiesaTeams/architecture-platform-sa-design-artifacts
Decision evidence
public snapshotAI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs bin/install.js from an automatic postinstall hook.
- The installer uses its current working directory as the target for package content.
- The installer maps package-owned agent assets to paths including .github and .claude.
- On a new installation, the installer copies mapped assets to their target paths.
- The installer also clones a Siesa design repository into _bmad-output/design-artifacts.
- Reviewed OAuth code sends authorization and refresh exchanges to Atlassian and saves returned tokens locally.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
18 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node ./bin/install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node ./bin/install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgclaude/commands/get-features/oauth-login.jsView file
13L14: const http = require('http');
L15: const https = require('https');
L16: const { exec } = require('child_process');
L17: const fs = require('fs');
...
L21: // Load shared configuration
L22: const config = JSON.parse(fs.readFileSync(path.join(__dirname, 'oauth-config.json')));
L23:
...
L42: function openBrowser(url) {
L43: const platform = process.platform;
L44: if (platform === 'win32') {
...
L77: req.on('error', reject);
High
Findings
1 Critical15 High5 Medium4 Low
CriticalAi Agent Control Hijackbin/install.js
HighInstall Time Lifecycle Scriptspackage.json
HighSandbox Evasion Gated Capabilityclaude/commands/get-features/oauth-login.js
HighTrigger Reachable External Ai Agent Control Surface Mutationbin/install.js
HighPayload In Excluded Dirclaude/skills/bmad-customize/scripts/tests/test_list_customizable_skills.py
HighSemantic Analysis Limitedsiesa-agents/observability/scripts/sa-init-env.js#virtual:normalized:round1
HighKnown Malware Source Similaritybin/install.js
HighKnown Malware Source Similarityclaude/commands/get-features/oauth-login.js
HighKnown Malware Source Similaritysiesa-agents/observability/scripts/sa-init-project.js
Affected versions and remediation
This report applies to siesa-agents@2.1.107.
See all versions of siesa-agents for other recorded verdicts.
- Review the evidence and your use of siesa-agents@2.1.107 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.