registry / @aegisrunner/runner / 1.2.0

@aegisrunner/runner@1.2.0

The AegisRunner self-hosted local executor — runs `aegis scan --local` scans AND `aegis run --local` test suites on your machine (browser stays local, brain + storage in the cloud). No Docker required.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 278 KB of source, external domains: app.aegisrunner.com

Source & flagged code

5 flagged

bin.mjsView file

Lines 1-30javascript

1#!/usr/bin/env node

2// @aegisrunner/scan-runner — Docker-free web executor for `aegis scan --local`.

3//

4// Thin launcher: ensure the browser is installed, map flags/env onto the

5// executor's env, then run the audited, brain-free executor bundle. Playwright is

6// a dependency of THIS package. No Docker.

7import { spawnSync } from 'node:child_process';

Source & flagged code

5 flagged · loading source

bin.mjsView file

6// a dependency of THIS package. No Docker. L7: import { spawnSync } from 'node:child_process'; L8: import { createRequire } from 'node:module';

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code