wakeloop@0.2.30: Clean npm security report (Allow)

AI Security Review

scanned 4d ago · by lpm-firewall-ai

No confirmed malicious install-time or import-time attack surface. The CLI can contact WakeLoop services and explicitly deploy its bundled skills to selected agent directories, but source shows user-command triggers and ownership safeguards.

Static reason

No blocking static signals were detected.

Trigger

Explicit wakeloop CLI commands such as skills install/ensure, auth, or service operations.

Impact

No unconsented persistence, credential harvesting, payload execution, or foreign AI-agent control mutation was confirmed.

Mechanism

User-invoked WakeLoop CLI state, skill, and API management.

Rationale

Source inspection found a package-aligned CLI with no install lifecycle execution. Agent-skill writes are explicit commands, use selected targets, and protect non-WakeLoop skill directories; no concrete malicious chain was found.

Evidence

package.jsondist/wakeloop.jsdist/command-B56hgV00.jsdist/base-url-CGBGOGDV.js

Network endpoints3

gateway.wakeloop.aiauth.wakeloop.airegistry.npmjs.org

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall/install/postinstall hook; only prepublishOnly.
dist/wakeloop.js dispatches only when the wakeloop CLI is invoked.
dist/command-B56hgV00.js requires explicit skills install/ensure targets before writing agent skill directories.
Skill removal checks WakeLoop ownership markers and blocks non-WakeLoop skills.
dist/base-url-CGBGOGDV.js confines normal state to the configured ~/.wakeloop root.
The eval Worker is a fixed, read-only local OpenCode SQLite directory query.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 2.10 MB of source, external domains: developers.cloudflare.com, gateway.wakeloop.ai, registry.npmjs.org, wakeloop.ai, wakeloop.local, www.schemastore.org

Source & flagged code

3 flagged

dist/base-url-CGBGOGDV.jsView file

253{ L254: body: (targetName) => `${targetName} couldn’t start because its Project isn’t connected on the computer that runs it. Connect that Project on the Agent’s computer, then try again.`... L255: kind: "local_agent_prepare", ... L972: try { L973: const parsed = JSON.parse(value); L974: if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null; ... L3559: contextHealed: z.boolean().optional(), L3560: exitCode: z.int().nullable().optional(), L3561: exitObservedAtMs: z.number().int().nonnegative().optional(), ... L8279: const isoDateTimeSchema$2 = z.iso.datetime({ offset: true }); L8280: const [redacted] = z.enum(["public", "private"]); L8281: const spaceCreatorSchema = z.strictObject({

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/base-url-CGBGOGDV.jsView on unpkg · L253

dist/command-B56hgV00.jsView file

•path = dist/command-B56hgV00.js kind = oversized_source_file sizeBytes = 3510866 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/command-B56hgV00.jsView on unpkg

•path = dist/command-B56hgV00.js kind = oversized_cli_entrypoint sizeBytes = 3510866 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/command-B56hgV00.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/base-url-CGBGOGDV.jsView file

253{ L254: body: (targetName) => `${targetName} couldn’t start because its Project isn’t connected on the computer that runs it. Connect that Project on the Agent’s computer, then try again.`... L255: kind: "local_agent_prepare", ... L972: try { L973: const parsed = JSON.parse(value); L974: if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null; ... L3559: contextHealed: z.boolean().optional(), L3560: exitCode: z.int().nullable().optional(), L3561: exitObservedAtMs: z.number().int().nonnegative().optional(), ... L8279: const isoDateTimeSchema$2 = z.iso.datetime({ offset: true }); L8280: const [redacted] = z.enum(["public", "private"]); L8281: const spaceCreatorSchema = z.strictObject({

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/base-url-CGBGOGDV.jsView on unpkg · L253

dist/command-B56hgV00.jsView file

•path = dist/command-B56hgV00.js kind = oversized_source_file sizeBytes = 3510866 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/command-B56hgV00.jsView on unpkg

Findings

1 High4 Medium6 Low

HighOversized Source Filedist/command-B56hgV00.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/command-B56hgV00.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/base-url-CGBGOGDV.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings