registry / wakeloop / 0.2.1

wakeloop@0.2.1

WakeLoop CLI - https://wakeloop.ai

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is a large Wakeloop CLI that performs explicit local service, agent, skills, and space operations when the user runs commands.

Static reason

No blocking static signals were detected.

Trigger

User runs the wakeloop CLI or maintainer publish scripts.

Impact

No confirmed malicious impact from static inspection.

Mechanism

explicit CLI/service/API operations

Rationale

Static source inspection found a user-invoked Wakeloop CLI with expected service, local-agent, skills, and network functionality but no consumer install hook or concrete malicious chain. AI-agent/skills mutations are explicit package-owned commands rather than unconsented install-time control-surface hijacking.

Evidence

package.jsondist/wakeloop.jsdist/base-url-5a-hDG2X.jsdist/paths-CI0MoSDY.jsdist/lock-BnMoxq4l.jsdist/wakeloop-dev.jsskills/wakeloop-cli/SKILL.md

Network endpoints4

gateway.wakeloop.aiauth.wakeloop.aiwakeloop.airegistry.npmjs.org

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for block

package.json exposes CLI bin dist/wakeloop.js and no runtime library entrypoint
dist/wakeloop.js contains explicit commands for service, skills, agents, profiles, and spaces
dist/wakeloop.js can spawn local agent/service processes and write WakeLoop config/skills under user-invoked commands
Network code targets WakeLoop-aligned gateway/auth URLs and npm registry update checks

Evidence against

package.json has no consumer preinstall/install/postinstall hook; only publish-time prepack/prepublishOnly scripts
dist/wakeloop.js command registration shows behavior is activated by explicit wakeloop subcommands
skills installation avoids overwriting non-WakeLoop skills and marks managed copies in .wakeloop-skill.json
Default endpoints are gateway.wakeloop.ai/auth.wakeloop.ai or localhost dev/service URLs, matching package purpose
No inspected source showed credential harvesting, stealth persistence, destructive install behavior, or remote payload execution

Behavioral surface

Source

ChildProcessCryptoEnvironmentVars

Source & flagged code

3 flagged

dist/lock-BnMoxq4l.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

3import { A as sessionsDir, x as normalizeWakeLoopProfileId, y as locksDir } from "./paths-CI0MoSDY.js";

4import { createHash } from "node:crypto";

5import { mkdir, open, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";

6import { join } from "node:path";

7import process$1 from "node:process";

9//#region src/config/session-profile.ts

10const WAKELOOP_CLI_CONTEXT_ENV_KEY = "WAKELOOP_CLI_CONTEXT_ID";

11const LEGACY_WAKELOOP_CLI_CONTEXT_ENV_KEY = "WAKELOOP_AGENT_SESSION_ID";

12const CLI_CONTEXT_ENV_KEYS = [WAKELOOP_CLI_CONTEXT_ENV_KEY, LEGACY_WAKELOOP_CLI_CONTEXT_ENV_KEY];

13const SESSION_FILE_MAX_LENGTH = 128;

14const SESSION_FILE_HASH_LENGTH = 8;

15function resolveCliContext(profileIdInput) {

16 const explicit = normalizeSessionId(profileIdInput);

17 if (explicit) return {

18 cliContextId: explicit,

19 source: "manual"

20 };

21 for (const key of CLI_CONTEXT_ENV_KEYS) {

22 const sessionId = normalizeSessionId(process.env[key]);

23 if (sessionId) return {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lock-BnMoxq4l.jsView on unpkg · L21

24 cliContextId: sessionId,

25 source: `environment:${key}`

26 };

27 }

28 return resolveTerminalSessionId();

29}

30function resolveCliContextId(profileIdInput) {

31 return resolveCliContext(profileIdInput)?.cliContextId ?? null;

32}

33function normalizeSessionSource(raw) {

34 const value = String(raw ?? "").trim();

35 if (!value) return null;

36 return value;

37}

38async function readCliContextState(input) {

39 const cliContextId = resolveSessionStateId(input?.sessionId);

40 if (!cliContextId) return null;

41 const raw = await readFile(cliContextStatePath(cliContextId), "utf8").catch(() => null);

dist/wakeloop.jsView file

•path = dist/wakeloop.js kind = oversized_source_file sizeBytes = 4304806 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/wakeloop.jsView on unpkg

•path = dist/wakeloop.js kind = oversized_cli_entrypoint sizeBytes = 4304806 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/wakeloop.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/lock-BnMoxq4l.jsView file

21for (const key of CLI_CONTEXT_ENV_KEYS) { L22: const sessionId = normalizeSessionId(process.env[key]); L23: if (sessionId) return { ... L105: try { L106: parsed = JSON.parse(raw); L107: } catch { ... L165: function resolveTerminalSessionId() { L166: if (!(process.stdin.isTTY || process.stdout.isTTY)) return null; L167: const parentPid = Number(process.ppid);

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lock-BnMoxq4l.jsView on unpkg · L21

dist/wakeloop.jsView file

•path = dist/wakeloop.js kind = oversized_source_file sizeBytes = 4304806 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/wakeloop.jsView on unpkg

•path = dist/wakeloop.js kind = oversized_cli_entrypoint sizeBytes = 4304806 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Findings

1 High4 Medium6 Low

HighOversized Source Filedist/wakeloop.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/wakeloop.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/lock-BnMoxq4l.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings