registry / @adcp/sdk / 11.1.0

@adcp/sdk@11.1.0

⚠ Under review

AdCP SDK — client, server, and compliance harnesses for the AdContext Protocol (MCP + A2A)

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 535 file(s), 8.39 MB of source, external domains: 127.0.0.1, acme-tv.example.com, acmeoutdoor.example, adcontextprotocol.org, addie.example.com, addie.meridian.example.com, addie.pinnacle.example.com, agent.example.com, agent1-dup.example.com, agent1.example.com, agenticadvertising.org, auth.example.com, budget-ads.example.com, budget-agent.example.com, conformance.example, creative.adcontextprotocol.org, creatives.adcontextprotocol.org, custom-agent.example.com, demo-agent.adcontextprotocol.org, demo-env.example.com, demo.example.com, dev-agent.example.com, dev.example.com, e2e-orchestrator.adcontextprotocol.org, example.com, fashion-network.example.com, github.com, governance.test.example, images.unsplash.com, imp.example, json-schema.org, metro.example.com, mirror.adcontextprotocol.org, mock-creative-template.example, network.example.com, ngrok.com, novamotors.example, oauth-server.com, observer.test, pixel.example, premium-ads.example.com, premium-agent.example.com, premium.example.com, publisher.com, registry.npmjs.org, run.example.com, sandbox.seller.com, signer.internal, simple-agent.example.com, snapadcp.scope3.com

Source & flagged code

8 flagged

bin/adcp-async-handler.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

3/**

4 * Async webhook handler for AdCP CLI

5 *

6 * This module handles async/webhook responses by:

7 * 1. Starting a temporary HTTP server for webhooks

8 * 2. Using ngrok to expose the server publicly (if available)

9 * 3. Waiting for the async response

10 */

12const http = require('http');

13const { spawn } = require('child_process');

14const { randomUUID } = require('crypto');

High

Child Process

Package source references child process execution.

bin/adcp-async-handler.jsView on unpkg · L12

16class AsyncWebhookHandler {

17 constructor(options = {}) {

18 this.port = options.port || 0; // 0 = random available port

19 this.timeout = options.timeout || 300000; // 5 minutes default

20 this.debug = options.debug || false;

21 this.server = null;

22 this.ngrokProcess = null;

23 this.webhookUrl = null;

24 this.operationId = randomUUID();

25 this.responsePromise = null;

26 this.responseResolver = null;

27 }

29 /**

30 * Check if ngrok is installed

31 */

32 static isNgrokAvailable() {

bin/adcp-storyboard-summary.jsView file

Lines 1-37javascript

1/**

2 * Markdown summary writers + soft-fail helpers for the storyboard CLI runners

3 * (issue adcp-client#1527).

4 *

5 * Extracted from bin/adcp.js so the formatting / file-write / soft-fail surfaces

6 * are unit-testable without spawning the CLI. The runner commands import these

7 * to render `--summary-file` outputs and to print the always-on

8 * "STORYBOARD FAILURES" block when `--soft-fail` swallows a failing exit code.

9 *

10 * Two markdown shapes exist because the runner has two underlying result

11 * shapes: `comply()` returns a `ComplianceResult` (with `summary.steps_passed`,

bin/adcp.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

3/**

4 * AdCP CLI Tool

5 *

6 * Simple command-line utility to call AdCP agents directly

7 *

8 * Usage:

9 * adcp <protocol> <agent-url> <tool-name> [payload-json] [--auth token]

10 *

11 * Examples:

12 * adcp mcp https://agent.example.com/mcp get_products '{"brief":"coffee brands"}'

13 * adcp a2a https://agent.example.com list_creative_formats '{}' --auth your_token_here

dist/lib/types/wellknown-schemas.generated.jsView file

10// ---- brand.json ---- L11: exports.BrandJsonSchema = zod_1.z.union([zod_1.z.object({ "$schema": zod_1.z.string().optional(), "authoritative_location": zod_1.z.string().url().regex(new RegExp("^https://")).de... L12: // ---- adagents.json ---- L13: exports.AdagentsJsonSchema = zod_1.z.union([zod_1.z.object({ "$schema": zod_1.z.string().describe("JSON Schema identifier for this adagents.json file").optional(), "authoritative_l... L14: const result = zod_1.z.any().safeParse(value).success ... L26: } L27: }), zod_1.z.intersection(zod_1.z.any().refine((value) => !zod_1.z.intersection(zod_1.z.any(), zod_1.z.any()).safeParse(value).success, "Invalid input: Should NOT be valid against s... L28: //# sourceMappingURL=wellknown-schemas.generated.js.map

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/lib/types/wellknown-schemas.generated.jsView on unpkg · L10

examples/hello-cluster.tsView file

Lines 252-292typescript

252 hint = `set ${upstream.envVar} to a reachable URL or start the upstream service`;

253 } else {

254 const port = new URL(base).port || '4150';

255 hint = `run 'npx @adcp/sdk@latest mock-server ${config.

bin/adcp-registry.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @adcp/sdk@9.6.1 matchedIdentity = npm:QGFkY3Avc2Rr:9.6.1 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/adcp-registry.jsView on unpkg

Source & flagged code

8 flagged · loading source

bin/adcp-async-handler.jsView file

12const http = require('http'); L13: const { spawn } = require('child_process'); L14: const { randomUUID } = require('crypto');

High

Child Process

Package source references child process execution.

bin/adcp-async-handler.jsView on unpkg · L12

bin/adcp-storyboard-summary.jsView file

17L18: const { writeFileSync } = require('node:fs'); L19:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/adcp-storyboard-summary.jsView on unpkg · L17

bin/adcp.jsView file

11Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, execution+network L11: * Examples: L12: * adcp mcp https://agent.example.com/mcp get_products '{"brief":"coffee brands"}' L13: * adcp a2a https://agent.example.com list_creative_formats '{}' --auth your_token_here ... L21: if (process.argv.includes('--allow-http')) { L22: process.env.ADCP_ALLOW_INTERNAL_PROBES = '1'; L23: } ... L29: const net = require('net'); L30: const { spawn } = require('child_process'); L31: const { AsyncWebhookHandler } = require('./adcp-async-handler.js'); ... L41: const { handleRegistryCommand } = require('./adcp-registry.js'); L42: const { captureStdoutLogs, writeJsonOutput } = require('./adcp-json-stdout.js'); L43: const { printStepHints, countHintsInResult } = require('./adcp-step-hints.js');

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/adcp.jsView on unpkg · L11

21if (process.argv.includes('--allow-http')) { L22: process.env.ADCP_ALLOW_INTERNAL_PROBES = '1'; L23: } ... L28: const { pathToFileURL } = require('url'); L29: const net = require('net'); L30: const { spawn } = require('child_process'); L31: const { AsyncWebhookHandler } = require('./adcp-async-handler.js');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/adcp.jsView on unpkg · L21

1444package = @adcp/sdk; repositoryIdentity = adcp-client; dependency = yaml L1444: try { L1445: const { parse } = require('yaml'); L1446: return parse(raw);

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/adcp.jsView on unpkg · L1444

dist/lib/types/wellknown-schemas.generated.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/lib/types/wellknown-schemas.generated.jsView on unpkg · L10

examples/hello-cluster.tsView file

272const abs = resolvePath(REPO_ROOT, config.entrypoint); L273: const child = spawn('npx', ['tsx', abs], { L274: env: {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

examples/hello-cluster.tsView on unpkg · L272

bin/adcp-registry.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/adcp-registry.jsView on unpkg

Findings

1 Critical7 High4 Medium6 Low

CriticalPrevious Version Dangerous Deltabin/adcp-registry.js

HighChild Processbin/adcp-async-handler.js

HighShell

HighEntrypoint Build Divergencebin/adcp.js

HighSame File Env Network Executionbin/adcp.js

HighCloud Metadata Accessdist/lib/types/wellknown-schemas.generated.js

HighCopied Package Dependency Bridgebin/adcp.js

HighRuntime Package Installexamples/hello-cluster.ts

MediumDynamic Requirebin/adcp-storyboard-summary.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

bin/adcp-async-handler.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

3/**

4 * Async webhook handler for AdCP CLI

5 *

6 * This module handles async/webhook responses by:

7 * 1. Starting a temporary HTTP server for webhooks

8 * 2. Using ngrok to expose the server publicly (if available)

9 * 3. Waiting for the async response

10 */

12const http = require('http');

13const { spawn } = require('child_process');

14const { randomUUID } = require('crypto');

High

Child Process

Package source references child process execution.

bin/adcp-async-handler.jsView on unpkg · L12

16class AsyncWebhookHandler {

17 constructor(options = {}) {

18 this.port = options.port || 0; // 0 = random available port

19 this.timeout = options.timeout || 300000; // 5 minutes default

20 this.debug = options.debug || false;

21 this.server = null;

22 this.ngrokProcess = null;

23 this.webhookUrl = null;

24 this.operationId = randomUUID();

25 this.responsePromise = null;

26 this.responseResolver = null;

27 }

29 /**

30 * Check if ngrok is installed

31 */

32 static isNgrokAvailable() {

bin/adcp-storyboard-summary.jsView file

Lines 1-37javascript

1/**

2 * Markdown summary writers + soft-fail helpers for the storyboard CLI runners

3 * (issue adcp-client#1527).

4 *

5 * Extracted from bin/adcp.js so the formatting / file-write / soft-fail surfaces

6 * are unit-testable without spawning the CLI. The runner commands import these

7 * to render `--summary-file` outputs and to print the always-on

8 * "STORYBOARD FAILURES" block when `--soft-fail` swallows a failing exit code.

9 *

10 * Two markdown shapes exist because the runner has two underlying result

11 * shapes: `comply()` returns a `ComplianceResult` (with `summary.steps_passed`,

bin/adcp.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

3/**

4 * AdCP CLI Tool

5 *

6 * Simple command-line utility to call AdCP agents directly

7 *

8 * Usage:

9 * adcp <protocol> <agent-url> <tool-name> [payload-json] [--auth token]

10 *

11 * Examples:

12 * adcp mcp https://agent.example.com/mcp get_products '{"brief":"coffee brands"}'

13 * adcp a2a https://agent.example.com list_creative_formats '{}' --auth your_token_here

dist/lib/types/wellknown-schemas.generated.jsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/lib/types/wellknown-schemas.generated.jsView on unpkg · L10

examples/hello-cluster.tsView file

Lines 252-292typescript

252 hint = `set ${upstream.envVar} to a reachable URL or start the upstream service`;

253 } else {

254 const port = new URL(base).port || '4150';

255 hint = `run 'npx @adcp/sdk@latest mock-server ${config.

bin/adcp-registry.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/adcp-registry.jsView on unpkg