registry / @3h4x/agent-post / 1.5.0

@3h4x/agent-post@1.5.0

⚠ Under review

TypeScript library for AI-generated social posting to Moltx, Moltbook, and Clawstr.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 23 file(s), 158 KB of source, external domains: borged.io, clawstr.com, example.com, moltx.io, www.moltbook.com

Source & flagged code

6 flagged

package.jsonView file

Lines 1-30json

2 "name": "@3h4x/agent-post",

3 "version": "1.5.0",

4 "type": "module",

5 "packageManager": "pnpm@11.4.0",

6 "exports": {

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.preinstall = npx only-allow pnpm

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

src/reply/post.tsView file

1import { execFile } from 'child_process' L2: import { rmSync } from 'fs'

High

Child Process

Package source references child process execution.

src/reply/post.tsView on unpkg · L1

36} L37: return { externalId, url: externalId ? `https://www.moltbook.com/comment/${externalId}` : undefined } L38: } ... L42: return new Promise((resolve, reject) => { L43: execFile('npx', ['-y', '@clawstr/cli@latest', 'reply', noteExternalId, content], { timeout: 60_000, env: { ...process.env, HOME: tmpHome } }, (error, stdout, stderr) => { L44: try { rmSync(tmpHome, { recursive: true, force: true }) } catch { /* ignore */ }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/reply/post.tsView on unpkg · L36

27headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' }, L28: body: JSON.stringify({ content, parent_id: commentExternalId }), L29: }) ... L36: } L37: return { externalId, url: externalId ? `https://www.moltbook.com/comment/${externalId}` : undefined } L38: } ... L42: return new Promise((resolve, reject) => { L43: execFile('npx', ['-y', '@clawstr/cli@latest', 'reply', noteExternalId, content], { timeout: 60_000, env: { ...process.env, HOME: tmpHome } }, (error, stdout, stderr) => { L44: try { rmSync(tmpHome, { recursive: true, force: true }) } catch { /* ignore */ }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

src/reply/post.tsView on unpkg · L27

42return new Promise((resolve, reject) => { L43: execFile('npx', ['-y', '@clawstr/cli@latest', 'reply', noteExternalId, content], { timeout: 60_000, env: { ...process.env, HOME: tmpHome } }, (error, stdout, stderr) => { L44: try { rmSync(tmpHome, { recursive: true, force: true }) } catch { /* ignore */ }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/reply/post.tsView on unpkg · L42

src/index.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @3h4x/agent-post@1.3.2 matchedIdentity = npm:QDNoNHgvYWdlbnQtcG9zdA:1.3.2 similarity = 0.545 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/index.tsView on unpkg

Findings

1 Critical6 High3 Medium6 Low

CriticalPrevious Version Dangerous Deltasrc/index.ts

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processsrc/reply/post.ts

HighShell

HighSame File Env Network Executionsrc/reply/post.ts

HighCommand Output Exfiltrationsrc/reply/post.ts

HighRuntime Package Installsrc/reply/post.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

src/reply/post.tsView file

Lines 1-62typescript

1import { execFile } from 'child_process'

2import { rmSync } from 'fs'

High

Child Process

Package source references child process execution.

src/reply/post.tsView on unpkg · L1

3import type { Platform } from '../index.js'

4import { createClawstrTempHome } from '../index.js'

5import { parseClawstrReplyResult } from './clawstr.js'

6import type { ReplierApiKeys, ReplyPostResult } from './types.js'

8async function replyOnMoltx(parentExternalId: string, content: string, apiKey: string): Promise<ReplyPostResult> {

9 const res = await fetch('https://moltx.io/v1/posts', {

10 method: 'POST',

11 headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },

12 body: JSON.stringify({ type: 'reply', parent_id: parentExternalId, content }),

13 })

14 if (!res.ok) throw new Error(`Moltx reply API ${res.status}: ${await res.text()}`)

15 const raw = await res.json()

16 const wrapper = raw as { data?: { post?: { id?: string }; id?: string }; id?: string }

17 const externalId = wrapper?.data?.post?.id || wrapper?.data?.id || wrapper?.id || ''

18 if (!externalId) {

19 throw new Error(`Moltx reply API returned no reply id: ${JSON.stringify(raw).slice(0, 200)}`)

20 }

21 return { externalId, url: externalId ? `https://moltx.io/post/${externalId}` : undefined }

22}

24async function replyOnMoltbook(postExternalId: string, commentExternalId: string, content: string, apiKey: string): Promise<ReplyPostResult> {

25 const res = await fetch(`https://www.moltbook.com/api/v1/posts/${postExternalId}/comments`, {

26 method: 'POST',

27 headers: { 'Authorization': `Bearer ${apiKey}`, 'Content-Type': 'application/json' },

28 body: JSON.stringify({ content, parent_id: commentExternalId }),

29 })

30 if (!res.ok) throw new Error(`Moltbook reply API ${res.status}: ${await res.text()}`)

31 const raw = await res.json()

32 const wrapper = raw as { comment?: { id?: string }; id?: string }

33 const externalId = wrapper?.comment?.id || wrapper?.id || ''

34 if (!externalId) {

35 throw new Error(`Moltbook reply API returned no reply id: ${JSON.stringify(raw).slice(0, 200)}`)

36 }

37 return { externalId, url: externalId ? `https://www.moltbook.com/comment/${externalId}` : undefined }

38}

40async function replyOnClawstr(noteExternalId: string, content: string, secretKey: string): Promise<ReplyPostResult> {

41 const tmpHome = createClawstrTempHome(secretKey)

42 return new Promise((resolve, reject) => {

43 execFile('npx', ['-y', '@clawstr/cli@latest', 'reply', noteExternalId, content], { timeout: 60_000, env: { ...process.env, HOME: tmpHome } }, (error, stdout, stderr) => {

44 try { rmSync(tmpHome, { recursive: true, force: true }) } catch { /* ignore */ }

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

src/reply/post.tsView on unpkg · L27

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/reply/post.tsView on unpkg · L36

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/reply/post.tsView on unpkg · L42

45 if (error) {

46 reject(new Error(`Clawstr reply CLI failed: ${error.message}${stderr ? ` stderr: ${stderr}` : ''}`))

47 return

48 }

49 try {

50 resolve(parseClawstrReplyResult(stdout, stderr))

51 } catch (parseError) {

52 reject(parseError instanceof Error ? parseError : new Error(String(parseError)))

53 }

54 })

55 })

56}

58export async function postReplyOnPlatform(

59 platform: Platform,

60 parentPostExternalId: string,

61 parentReplyExternalId: string,

62 content: string,