registry / the-soul / 0.1.7

the-soul@0.1.7

Install-and-forget local memory for agents.

AI Security Review

scanned 18h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack behavior is present. Explicit installation configures supported AI-agent hooks/MCP and can later invoke local agent CLIs.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `soul install <agent>` and later uses configured agent lifecycle hooks.

Impact

Adds persistent user-level agent integrations with access to hook context and local memory workflows.

Mechanism

first-party AI-agent extension and hook installation

Rationale

Warn for the explicit, persistent agent-extension capability. Source inspection found no lifecycle execution, credential harvesting, direct network client, or concrete malicious chain.

Evidence

package.jsondist/cli/app.jsdist/adapters/codex/index.jsdist/adapters/install-transaction.jsdist/hooks/runner-process.jsdist/adapters/claude/index.js

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

the-soul@0.1.7

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code