fallow@3.36.0

CAUTION

Publisher claims: "Codebase intelligence for TypeScript and JavaScript: health, complexity, duplication, architecture, styling drift, and unused code from one graph. CLI, LSP, and MCP server. Zero config for over 100 frameworks." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher fallow-rs · joined 0 days agoInstalls 5.3MLast detonated 2 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsschema.json:307 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsschema.json:1853 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lazy-verify.js:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.js:169 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lazy-verify.js:314 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsschema.json:2168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lazy-verify.js:310 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.js:167 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/lazy-verify.js:247 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.test.js:223 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.test.js:60 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.test.js:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.test.js:224 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.js:173 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/run-binary.test.js:55 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-binary.js:311 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/sentinel-path.js:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

HTML comment carrying imperative instructions to the agentskills/fallow/references/cli-reference.md:77 · HTML comment carrying imperative instructions to the agent

AST01

CRITICAL

Access to sensitive file pathsskills/fallow/references/gotchas.md:451 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsskills/fallow/references/cli-reference.md:1365 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-binary.test.js:502 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-binary.test.js:498 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

HTML comment carrying imperative instructions to the agentskills/fallow/references/cli-reference.md:598 · HTML comment carrying imperative instructions to the agent

AST01

CRITICAL

Access to sensitive file pathsskills/fallow/SKILL.md:245 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-binary.test.js:501 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsskills/fallow/references/cli-reference.md:1314 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsskills/fallow/references/gotchas.md:521 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-binary.test.js:499 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsskills/fallow/references/cli-reference.md:1263 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsscripts/verify-binary.test.js:648 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandcapabilities.json:7057 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageREADME.md:23 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:25 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/SKILL.md:39 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

File permission modification commandcapabilities.json:7517 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Process kill commandcapabilities.json:7060 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageREADME.md:24 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandschema.json:1863 · Process kill command — agent can terminate processes

AST05

HIGH

File permission modification commandskills/fallow/references/cli-reference.md:1748 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesskills/fallow/SKILL.md:68 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

npx invocation of non-well-known packageREADME.md:22 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageREADME.md:17 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Process kill commandskills/fallow/references/cli-reference.md:1813 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandskills/fallow/references/cli-reference.md:2161 · Process kill command — agent can terminate processes

AST05

HIGH

Process kill commandskills/fallow/references/cli-reference.md:2163 · Process kill command — agent can terminate processes

AST05

HIGH

npx invocation of non-well-known packageskills/fallow/references/patterns.md:191 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/references/cli-reference.md:540 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/references/cli-reference.md:2215 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/references/cli-reference.md:503 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/references/patterns.md:102 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/references/patterns.md:198 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow/references/patterns.md:95 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionskills/fallow/references/cli-reference.md:814 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actioncapabilities.json:2029 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageskills/fallow/references/patterns.md:207 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow-setup/SKILL.md:30 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/fallow-setup/references/ci-gate.md:46 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionskills/fallow/references/cli-reference.md:443 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionskills/fallow/references/cli-reference.md:632 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionskills/fallow/SKILL.md:291 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionskills/fallow/references/cli-reference.md:445 · File type combined with upload action — agent may exfiltrate local data files

AST07

LOW

Unpinned dependencyscripts/verify-binary.js:450 · Unpinned dependency

AST06

LOW

Unpinned dependencyscripts/verify-binary.js:452 · Unpinned dependency

AST06

MEDIUM

File type combined with upload actionskills/fallow/references/cli-reference.md:1087 · File type combined with upload action — agent may exfiltrate local data files

AST07

LOW

Unpinned dependencyscripts/verify-binary.js:640 · Unpinned dependency

AST06

LOW

Unpinned dependencyscripts/verify-binary.js:610 · Unpinned dependency

AST06

LOW

Unpinned dependencyscripts/verify-binary.js:574 · Unpinned dependency

AST06

MEDIUM

File type combined with upload actionskills/fallow/references/patterns.md:791 · File type combined with upload action — agent may exfiltrate local data files

AST07