registry / usrcp-discord / 0.2.1

usrcp-discord@0.2.1

Discord capture+reader adapter for USRCP — vision-proof cross-channel memory

AI Security Review

scanned 3d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established by source inspection. The install hook rebuilds a native dependency and runtime behavior is a Discord adapter that captures/replies to messages using configured credentials.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm install postinstall; user running usrcp-discord

Impact

Potential install fragility from rebuild; expected Discord/Anthropic network activity during runtime

Mechanism

native dependency rebuild and user-configured Discord bot runtime

Rationale

The high-risk primitives are either lifecycle native rebuild maintenance or explicit runtime adapter behavior and are not paired with credential harvesting, hidden exfiltration, persistence, or install-time payload execution. The package should not be blocked based on the inspected sources.

Evidence

package.jsondist/index.jsnode_modules/better-sqlite3/buildnode_modules/usrcp-core/node_modules/better-sqlite3/buildnode_modules/usrcp-stream/node_modules/better-sqlite3/build~/.usrcp/discord-config.json

Network endpoints2

Discord API via discord.jsAnthropic API via @anthropic-ai/sdk

Decision evidence

public snapshot

AI called this Clean at 82.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json defines a postinstall that deletes better-sqlite3 build directories and runs npm rebuild better-sqlite3.
dist/index.js uses execSync only for user-invoked --reset-config to run 'usrcp setup --adapter=discord'.
dist/index.js logs into Discord using configured token and reads USRCP_PASSPHRASE for the local ledger.

Evidence against

No import-time execution: dist/index.js calls main only when require.main === module.
Network use is package-aligned: discord.js bot login/replies and Anthropic SDK use configured user credentials.
Config and credentials are loaded from local USRCP config/env for declared Discord adapter behavior.
No code found that harvests arbitrary files, exfiltrates secrets, persists, or mutates AI-agent control surfaces in inspected entrypoint/manifest.

Behavioral surface

Source

ChildProcessEnvironmentVarsNetwork

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 39.8 KB of source, external domains: console.anthropic.com, discord.com

Source & flagged code

5 flagged

package.jsonView file

Lines 1-34json

2 "name": "usrcp-discord",

3 "version": "0.2.1",

4 "description": "Discord capture+reader adapter for USRCP — vision-proof cross-channel memory",

5 "main": "dist/index.js",

6 "files": [

7 "dist/**/*.js",

8 "dist/**/*.d.ts"

9 ],

10 "bin": {

11 "usrcp-discord": "dist/index.js"

12 },

13 "scripts": {

14 "postinstall": "node -e \"const fs=require(\\\"fs\\\"); for (const p of [\\\"node_modules/better-sqlite3/build\\\",\\\"node_modules/usrcp-core/node_modules/better-sqlite3/build\\\",\\\"node_modules/usrcp-stream/node_modules/better-sqlite3/build\\\"]) fs.rmSync(p,{recursive:true,force:true})\" && npm rebuild better-sqlite3",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L14

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

15 "prebuild": "(cd ../usrcp-adapter-kit && npm run build) && (cd ../usrcp-stream && npm run build)",

16 "build": "tsc",

17 "dev": "tsc --watch",

18 "start": "node dist/index.js",

19 "lint": "tsc --noEmit",

20 "pretest": "(cd ../usrcp-adapter-kit && npm run build) && (cd ../usrcp-stream && npm run build)",

21 "test": "vitest run",

22 "test:watch": "vitest"

23 },

24 "keywords": [

25 "usrcp",

26 "discord",

27 "adapter",

28 "memory"

29 ],

30 "author": "Chad Garner",

31 "license": "Apache-2.0",

32 "engines": {

33 "node": ">=20.0.0"

34 },

dist/index.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * USRCP Discord adapter entry point.

5 *

6 * usrcp-discord # load config, start bot

7 * usrcp-discord --reset-config # re-prompt all first-run questions

8 *

9 * Requires: USRCP_PASSPHRASE env var if the local ledger is passphrase-

10 * protected. All other config (bot token, API key, channel allowlist,

11 * user ID) lives in ~/.usrcp/discord-config.json.

12 */

dist/setup.jsView file

Lines 26-66javascript

26 o["default"] = v;

27});

28var __importStar = (this && this.__importStar) || (function () {

29 var ownKeys = function(o) {

30 ownKeys =

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "const fs=require(\"fs\"); for (const p of [\"node_modules/better-sqlite3/build\",\"node_modules/usrcp-core/node_modules/better-sqlite3/build\",\"node_modules/usrcp-stream/...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/index.jsView file

15exports.resolveMode = resolveMode; L16: const node_child_process_1 = require("node:child_process"); L17: const discord_js_1 = require("discord.js");

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L15

dist/setup.jsView file

46exports.runDiscordSetup = runDiscordSetup; L47: const https = __importStar(require("node:https")); L48: const node_child_process_1 = require("node:child_process"); L49: const config_js_1 = require("./config.js"); ... L55: return new Promise((resolve) => { L56: process.stderr.write(prompt); L57: const stdin = process.stdin;

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/setup.jsView on unpkg · L46

169package = usrcp-discord; repositoryIdentity = usrcp; dependency = @anthropic-ai/sdk L169: try { L170: const { default: Anthropic } = await import("@anthropic-ai/sdk"); L171: const client = new Anthropic({ apiKey });

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/setup.jsView on unpkg · L169

Findings

1 Critical4 High3 Medium2 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.js

HighCommand Output Exfiltrationdist/setup.js

HighCopied Package Dependency Bridgedist/setup.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowUrl Strings

Source & flagged code

5 flagged

package.jsonView file

Lines 1-34json

2 "name": "usrcp-discord",

3 "version": "0.2.1",

4 "description": "Discord capture+reader adapter for USRCP — vision-proof cross-channel memory",

5 "main": "dist/index.js",

6 "files": [

7 "dist/**/*.js",

8 "dist/**/*.d.ts"

9 ],

10 "bin": {

11 "usrcp-discord": "dist/index.js"

12 },

13 "scripts": {

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L14

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

15 "prebuild": "(cd ../usrcp-adapter-kit && npm run build) && (cd ../usrcp-stream && npm run build)",

16 "build": "tsc",

17 "dev": "tsc --watch",

18 "start": "node dist/index.js",

19 "lint": "tsc --noEmit",

20 "pretest": "(cd ../usrcp-adapter-kit && npm run build) && (cd ../usrcp-stream && npm run build)",

21 "test": "vitest run",

22 "test:watch": "vitest"

23 },

24 "keywords": [

25 "usrcp",

26 "discord",

27 "adapter",

28 "memory"

29 ],

30 "author": "Chad Garner",

31 "license": "Apache-2.0",

32 "engines": {

33 "node": ">=20.0.0"

34 },

dist/index.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2"use strict";

3/**

4 * USRCP Discord adapter entry point.

5 *

6 * usrcp-discord # load config, start bot

7 * usrcp-discord --reset-config # re-prompt all first-run questions

8 *

9 * Requires: USRCP_PASSPHRASE env var if the local ledger is passphrase-

10 * protected. All other config (bot token, API key, channel allowlist,

11 * user ID) lives in ~/.usrcp/discord-config.json.

12 */

dist/setup.jsView file

Lines 26-66javascript

26 o["default"] = v;

27});

28var __importStar = (this && this.__importStar) || (function () {

29 var ownKeys = function(o) {

30 ownKeys =

Lines 149-189javascript

149const MESSAGE_CONTENT_LIMITED_FLAG = 1 << 18; // GATEWAY_MESSAGE_CONTENT_LIMITED (verified bots)

150async function checkMessageContentIntent(token) {

151 try {

152 const { status, body } = await httpsGet("https://discord.com/api/v10/applications/@me", { Authorization: `Bot ${token}` });

153 if (status === 200) {

154 const app = JSON.parse(body);

155 const hasIntent = (app.flags & MESSAGE_CONTENT_FLAG) !== 0 ||

156 (app.flags & MESSAGE_CONTENT_LIMITED_FLAG) !== 0;

157 if (hasIntent)

158 return { ok: true, botId: app.id };

159 return { ok: false, botId: app.id, reason: "MESSAGE_CONTENT intent not enabled." };

160 }

161 return { ok: false, botId: "", reason: `Unexpected HTTP ${status} from /applications/@me.` };

162 }

163 catch (err) {

164 return { ok: false, botId: "", reason: `Network error: ${err instanceof Error ? err.message : String(err)}` };

165 }

166}

167async function validateAnthropicKey(apiKey) {

168 // Dynamic import of @anthropic-ai/sdk (only available in usrcp-discord which has it as a dep)

169 try {

170 const { default: Anthropic } = await import("@anthropic-ai/sdk");

171 const client = new Anthropic({ apiKey });

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/setup.jsView on unpkg · L169

172 await client.messages.create({

173 model: "claude-haiku-4-5",

174 max_tokens: 1,

175 messages: [{ role: "user", content: "hi" }],

176 });

177 return { ok: true };

178 }

179 catch (err) {

180 const msg = err instanceof Error ? err.message : String(err);

181 if (msg.includes("401") || msg.includes("Unauthorized") || msg.includes("invalid x-api-key") || msg.includes("authentication")) {

182 return { ok: false, reason: "Invalid API key (401)." };

183 }

184 // Any other error (network, rate-limit) — pass through as valid (fail-fast is for auth only)

185 return { ok: true };

186 }

187}

188function tryOpenUrl(url) {

189 try {