registry / tide-commander / 1.126.0

tide-commander@1.126.0

Visual multi-agent orchestrator and manager for Claude Code with 3D/2D interface

AI Security Review

scanned 3d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established by static inspection. The package is a user-invoked local AI orchestration server with optional integrations and setup helpers.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs tide-commander, npm run setup, or scripts/krunner/install-krunner-integration.sh.

Impact

Benign local service behavior; no unconsented install-time execution or exfiltration confirmed.

Mechanism

local server orchestration and optional desktop/Claude hook setup

Rationale

Static review found powerful but package-aligned local orchestration features that require explicit user commands, with no lifecycle execution or covert exfiltration. The scanner hits are explained by the app's server, integration, UI, PDF worker, and desktop-helper functionality.

Evidence

package.jsondist/src/packages/server/cli.jsdist/src/packages/server/setup.jsdist/src/packages/server/index.jsdist/src/packages/shared/version.jsscripts/krunner/install-krunner-integration.shscripts/krunner/tide-krunner-runner.jsdist/assets/index-BLMHzq1V.js~/.local/share/tide-commander/server.pid~/.local/share/tide-commander/server-meta.json~/.tide-commander/certs/localhost-key.pem~/.tide-commander/certs/localhost.pem~/.claude/settings.json~/.local/bin/tide-krunner-runner~/.local/share/dbus-1/services/org.riven.tide.krunner.service~/.local/share/krunner/dbusplugins/plasma-runner-tide-commander.desktop

Network endpoints4

registry.npmjs.org/localhost:5174/apilocalhost:5173localhost:6200

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for block

User-invoked setup.js can write Claude Code hooks in ~/.claude/settings.json.
CLI uses child_process to spawn its server and optional mkcert/tail commands.

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks.
bin entrypoint dist/src/packages/server/cli.js only runs when tide-commander is invoked.
Network use is package-aligned: local server/KRunner APIs and npm version check.
dist/assets index secret hits are UI placeholders/config fields, not embedded credentials.
KRunner install script is explicit user-run integration copying local helper files.
No credential harvesting, exfiltration, persistence-on-install, or destructive behavior found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings

ManifestNo manifest risk signals triggered.

scanned 349 file(s), 7.09 MB of source, external domains: 127.0.0.1, admin.google.com, api.anthropic.com, api.bitbucket.org, api.github.com, bitbucket.org, claude.ai, commander.local, console.cloud.google.com, example.com, github.com, id.atlassian.com, kenney.nl, kroki.io, ns.adobe.com, react.dev, registry.npmjs.org, wiki.example.com, www.googleapis.com, www.gstatic.com, www.w3.org, www.xfa.org, yourcompany.atlassian.net

Oversized source lightweight scan

dist/assets/main-DVOwU_fp.js2.65 MB file, sampled 256 KB

NetworkChildProcessObfuscatedHighEntropyStringsMinifiedUrlStringsgithub.comreact.dev

Source & flagged code

7 flagged

dist/assets/index-BLMHzq1V.jsView file

Lines 1-9javascript

1import{bo as ta,u as B,j as e,aV as j,br as Ms,bs as Fs,aW as Ue,s as D,bt as $s,r as m,D as Z,I as F,ab as Us,b3 as Ve,f as na,bu as la,W as ia,S as oa,k as ra,aa as Ks,b4 as He}from"./main-DVOwU_fp.js";import"./vendor-react--Eh9ivFN.js";import"./vendor-three-Chj50gSY.js";const ca=[{value:"",labelKey:"terminal:building.colorDefault"},{value:"#2a2a3a",labelKey:"terminal:building.colorDarkGray"},{value:"#3a2a2a",labelKey:"terminal:building.colorDarkRed"},{value:"#2a3a2a",labelKey:"terminal:building.colorDarkGreen"},{value:"#2a2a4a",labelKey:"terminal:building.colorDarkBlue"},{value:"#3a3a2a",la ...

2SERVER_PORT=7201

3NODE_ENV=production`,rows:3})]}),e.jsx("div",{className:"pm2-examples",children:e.jsxs("details",{children:[e.jsx("summary",{children:i("terminal:building.pm2Examples")}),e.jsxs("div",{className:"pm2-examples-content",children:[e.jsxs("div",{className:"pm2-example",children:[e.jsx("strong",{children:"Node.js:"})," Script: ",e.jsx("code",{children:"npm"}),", Args: ",e.jsx("code",{children:"run dev"})]}),e.jsxs("div",{className:"pm2-example",children:[e.jsx("strong",{children:"Symfony:"})," Script: ",e.jsx("code",{children:"symfony"}),", Args: ",e.jsx("code",{children:"serve --no-daemon"}),", In ...

4DATABASE_URL=postgres://...

5NODE_ENV=production`,rows:3})]})]}),q&&(k==null?void 0:k.dockerStatus)&&e.jsxs("div",{className:"docker-status-display",children:[e.jsxs("div",{className:"docker-status-row",children:[e.jsxs("span",{className:"docker-metric",children:[e.jsx("span",{className:"docker-metric-label",children:"ID"}),e.jsx("span",{className:"docker-metric-value",children:k.dockerStatus.containerId||

6`):""),ce(((js=s.docker)==null?void 0:js.mode)||"container"),me(((gs=s.docker)==null?void 0:gs.mode)==="existing"&&((vs=s.docker)==null?void 0:vs.containerName)||""),ue(((Ns=s.docker)==null?void 0:Ns.image)||""),he(((fs=s.docker)==null?void 0:fs.containerName)||""),be(((ks=s.docker)==null?void 0:ks.ports)||[]),ge(((ys=s.docker)==null?void 0:ys.volumes)||[]),ve((Cs=s.docker)!=null&&Cs.env?Object.entries(s.docker.env).map(([Y,Ke])=>`${Y}=${Ke}`).join(`

7`):""),fe(((Ss=s.docker)==null?void 0:Ss.network)||""),ye(((ws=s.docker)==null?void 0:ws.command)||""),Ce(((Ps=s.docker)==null?void 0:Ps.restart)||"unless-stopped"),Se(((Ds=s.docker)==null?void 0:Ds.pull)||"missing"),Pe(((Es=s.docker)==null?void 0:Es.composePath)||""),Ee(((zs=s.docker)==null?void 0:zs.composeProject)||""),Le(((As=(Ls=s.docker)==null?void 0:Ls.services)==null?void 0:As.join(", "))||""),Be(s.subordinateBuildingIds||[]),Re(((Bs=s.database)==null?void 0:Bs.connections)||[]),Ie((Ts=s.database)==null?void 0:Ts.activeConnectionId),Oe(((Rs=s.terminal)==null?void 0:Rs.shell)||""),Me((I ...

8`).map(f=>f.trim()).filter(f=>f&&f.includes("=")).map(f=>{const w=f.indexOf("=");return[f.slice(0,w),f.slice(w+1)]}))},Js=d=>{d.preventDefault();

Long lines were clipped for display.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView file

24* pdfjsBuild = ada343803 L25: */const e=!("object"!=typeof process||process+""!="[object process]"||process.versions.nw||process.versions.electron&&process.type&&"browser"!==process.type),t=[.001,0,0,.001,0,0],... L26: /*webpackIgnore: true*/

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView on unpkg · L24

dist/src/packages/server/integrations/whatsapp/whatsapp-trigger-handler.jsView file

Lines 114-154javascript

114 client.close();

115 client = null;

116 }

117 dedupe.clear();

118 contactNames.clear();

119 groupNames.clear();

120 }

121 function

scripts/krunner/install-krunner-integration.shView file

•path = scripts/krunner/install-krunner-integration.sh kind = build_helper sizeBytes = 1784 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/krunner/install-krunner-integration.shView on unpkg

dist/assets/main-DVOwU_fp.jsView file

•path = dist/assets/main-DVOwU_fp.js kind = oversized_source_file sizeBytes = 2780744 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-DVOwU_fp.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/assets/index-BLMHzq1V.jsView file

5patternName = private_key_openssh severity = critical line = 5 matchedText = NODE_ENV...in(`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/assets/index-BLMHzq1V.jsView on unpkg · L5

5patternName = private_key_openssh severity = critical line = 5 matchedText = NODE_ENV...in(`

Critical

Secret Pattern

OpenSSH private key in dist/assets/index-BLMHzq1V.js

dist/assets/index-BLMHzq1V.jsView on unpkg · L5

dist/assets/pdf.worker.min-FHbmGBN0.mjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView on unpkg · L24

dist/src/packages/server/integrations/whatsapp/whatsapp-trigger-handler.jsView file

134direction: payload.direction, L135: body: payload.body, L136: messageType: payload.mediaType ?? 'text', ... L573: // Protocol-relative; pick scheme from baseUrl. L574: const scheme = baseUrl.startsWith('https://') ? 'https:' : 'http:'; L575: return scheme + url;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/src/packages/server/integrations/whatsapp/whatsapp-trigger-handler.jsView on unpkg · L134

scripts/krunner/install-krunner-integration.shView file

•path = scripts/krunner/install-krunner-integration.sh kind = build_helper sizeBytes = 1784 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/krunner/install-krunner-integration.shView on unpkg

dist/assets/main-DVOwU_fp.jsView file

•path = dist/assets/main-DVOwU_fp.js kind = oversized_source_file sizeBytes = 2780744 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-DVOwU_fp.jsView on unpkg

Findings

2 Critical1 High6 Medium7 Low

CriticalCritical Secretdist/assets/index-BLMHzq1V.js

CriticalSecret Patterndist/assets/index-BLMHzq1V.js

HighOversized Source Filedist/assets/main-DVOwU_fp.js

MediumDynamic Requiredist/assets/pdf.worker.min-FHbmGBN0.mjs

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Build Helperscripts/krunner/install-krunner-integration.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/assets/pdf.worker.min-FHbmGBN0.mjs

LowWeak Cryptodist/src/packages/server/integrations/whatsapp/whatsapp-trigger-handler.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/assets/index-BLMHzq1V.jsView file

Lines 1-9javascript

2SERVER_PORT=7201

4DATABASE_URL=postgres://...

8`).map(f=>f.trim()).filter(f=>f&&f.includes("=")).map(f=>{const w=f.indexOf("=");return[f.slice(0,w),f.slice(w+1)]}))},Js=d=>{d.preventDefault();

Long lines were clipped for display.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView on unpkg · L24

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/assets/pdf.worker.min-FHbmGBN0.mjsView on unpkg · L24

dist/src/packages/server/integrations/whatsapp/whatsapp-trigger-handler.jsView file

Lines 114-154javascript

114 client.close();

115 client = null;

116 }

117 dedupe.clear();

118 contactNames.clear();

119 groupNames.clear();

120 }

121 function

scripts/krunner/install-krunner-integration.shView file

•path = scripts/krunner/install-krunner-integration.sh kind = build_helper sizeBytes = 1784 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/krunner/install-krunner-integration.shView on unpkg

dist/assets/main-DVOwU_fp.jsView file

•path = dist/assets/main-DVOwU_fp.js kind = oversized_source_file sizeBytes = 2780744 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/assets/main-DVOwU_fp.jsView on unpkg