registry / zecagent-dashboard / 0.5.0

zecagent-dashboard@0.5.0

AI Security Review

scanned 15h ago · by lpm-firewall-ai

At runtime, localhost-only dashboard APIs can prepare and approve cryptocurrency transfers through configured wallet CLI commands. No install-time execution or confirmed exfiltration endpoint is present.

Static reason

No blocking static signals were detected.

Trigger

A user or local process sends POST requests to wallet or purchase-approval routes.

Impact

Configured wallet funds could be transferred after local approval or agentic-payment actions.

Mechanism

Local dashboard payment orchestration using configured external wallet CLI commands.

Rationale

No concrete malicious chain is established, but runtime cryptocurrency-transfer orchestration and configurable CLI execution warrant a warning for dangerous capability. The suspicious primitives are package-aligned and locally guarded rather than stealthy.

Evidence

package.jsonscripts/prepare-standalone.mjs.next/standalone/apps/dashboard/server.js.next/standalone/apps/dashboard/.next/server/app/api/wallet/crosspay/route.js.next/standalone/apps/dashboard/.next/server/chunks/[root-of-the-server]__0ni8xi8._.js.next/standalone/apps/dashboard/.next/server/chunks/[root-of-the-server]__0a0g718._.js.next/standalone/apps/dashboard/.next/server/chunks/[root-of-the-server]__0z6k7yg._.js

zecagent-dashboard@0.5.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Behavioral surface

Source & flagged code