registry / @agentconnect.md/daemon / 1.5.0

@agentconnect.md/daemon@1.5.0

AgentConnect daemon — edge message + agent execution unit

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 1.75 MB of source, external domains: cdn.agentclientprotocol.com, datatracker.ietf.org, github.com, github.com.helper, github.com.usehttppath, json-schema.org, raw.githubusercontent.com, www.apple.com

Oversized source lightweight scan

dist/index.js2.47 MB file, sampled 256 KB

FilesystemEnvironmentVarsHighEntropyStrings

dist/run-foreground-CRZ17asA.js10.5 MB file, sampled 256 KB

FilesystemNetworkEnvironmentVarsCryptoHighEntropyStrings

Source & flagged code

8 flagged

dist/bridge-NEdX_EzI.jsView file

Lines 5301-5380javascript

5301 this.localRefs = env.localRefs;

5302 this.meta = env.meta;

5303 this.$async = schema === null || schema === void 0 ? void 0 : schema.$async;

5304 this.refs = {};

5305 }

5306 };

5307 exports.SchemaEnv = SchemaEnv;

5308 function compileSchema(sch) {

5309 const _sch = getCompilingSchema.call(this, sch);

5310 if (_sch) return _sch;

5311 const rootId = (0, resolve_1.getFullPath)(this.opts.uriResolver, sch.root.baseId);

5312 const { es5, lines } = this.opts.code;

5313 const { ownProperties } = this.opts;

5314 const gen = new codegen_1.CodeGen(this.scope, {

5315 es5,

5316 lines,

5317 ownProperties

5318 });

5319 let _ValidationError;

5320 if (sch.$async) _ValidationError = gen.scopeValue("Error", {

5321 ref: validation_error_1.default,

5322 code: (0, codegen_1._)`require("ajv/dist/runtime/validation_error").default`

5323 });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bridge-NEdX_EzI.jsView on unpkg · L5321

5324 const validateName = gen.scopeName("validate");

5325 sch.validateName = validateName;

5326 const schemaCxt = {

5327 gen,

5328 allErrors: this.opts.allErrors,

5329 data: names_1.default.data,

5330 parentData: names_1.default.parentData,

5331 parentDataProperty: names_1.default.parentDataProperty,

5332 dataNames: [names_1.default.data],

5333 dataPathArr: [codegen_1.nil],

5334 dataLevel: 0,

5335 dataTypes: [],

5336 definedProperties: /* @__PURE__ */ new Set(),

5337 topSchemaRef: gen.scopeValue("schema", this.opts.code.source === true ? {

5338 ref: sch.schema,

5339 code: (0, codegen_1.stringify)(sch.schema)

5340 } : { ref: sch.schema }),

5341 validateName,

5342 ValidationError: _ValidationError,

5343 schema: sch.schema,

5344 schemaEnv: sch,

5345 rootId,

5346 baseId: sch.baseId || rootId,

5347 schemaPath: codegen_1.nil,

5348 errSchemaPath: sch.schemaPath || (this.opts.jtd ? "" : "#"),

5349 errorPath: (0, codegen_1._)`""`,

5350 opts: this.opts,

5351 self: this

5352 };

5353 let sourceCode;

5354 try {

5355 this._compilations.add(sch);

5356 (0, validate_1.validateFunctionCode)(schemaCxt);

5357 gen.optimize(this.opts.code.optimize);

5358 const validateCode = gen.toString();

5359 sourceCode = `${gen.scopeRefs(names_1.default.scope)}return ${validateCode}`;

5360 if (this.opts.code.process) sourceCode = this.opts.code.process(sourceCode, sch);

5361 const validate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode)(this, this.scope.get());

5362 this.scope.value(validateName, { ref: validate });

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bridge-NEdX_EzI.jsView on unpkg · L5360

5363 validate.errors = null;

5364 validate.schema = sch.schema;

5365 validate.schemaEnv = sch;

5366 if (sch.$async) validate.$async = true;

5367 if (this.opts.code.source === true) validate.source = {

5368 validateName,

5369 validateCode,

5370 scopeValues: gen._values

5371 };

5372 if (this.opts.unevaluated) {

5373 const { props, items } = schemaCxt;

5374 validate.evaluated = {

5375 props: props instanceof codegen_1.Name ? void 0 : props,

5376 items: items instanceof codegen_1.Name ? void 0 : items,

5377 dynamicProps: props instanceof codegen_1.Name,

5378 dynamicItems: items instanceof codegen_1.Name

5379 };

5380 if (validate.source) validate.source.evaluated = (0, codegen_1.stringify)(validate.evaluated);

dist/acp-host-Cg7JjBEn.jsView file

Lines 1-27javascript

1import { i as __require, o as __toESM, t as __commonJSMin } from "./rolldown-runtime-CE-6LUnI.js";

2import { t as require_src$1 } from "./src-DDtlVutj.js";

3import { S as NEVER, _ as union, c as intersection, d as number, f as object, g as string, h as

dist/service-BQVw7wbz.jsView file

Lines 1-23javascript

1import { a as logsDir, l as resolveRoot, n as daemonLogPath } from "./paths-DEcUO8lC.js";

2import { dirname, join } from "node:path";

3import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

4import { execFile } from "node:child_process";

5import

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2590022 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2590022 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/bridge-NEdX_EzI.jsView file

5321ref: validation_error_1.default, L5322: code: (0, codegen_1._)`require("ajv/dist/runtime/validation_error").default` L5323: });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bridge-NEdX_EzI.jsView on unpkg · L5321

5360if (this.opts.code.process) sourceCode = this.opts.code.process(sourceCode, sch); L5361: const validate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode)(this, this.scope.get()); L5362: this.scope.value(validateName, { ref: validate });

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bridge-NEdX_EzI.jsView on unpkg · L5360

dist/acp-host-Cg7JjBEn.jsView file

7import { accessSync, constants, existsSync, mkdirSync, promises, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs"; L8: import { spawn } from "child_process"; L9: import { EventEmitter } from "node:events"; ... L37: function platformKey() { L38: const os = process.platform === "win32" ? "windows" : process.platform === "darwin" ? "darwin" : process.platform === "linux" ? "linux" : null; L39: const arch = process.arch === "arm64" ? "aarch64" : process.arch === "x64" ? "x86_64" : null; ... L73: } L74: const REGISTRY_URL = "https://cdn.agentclientprotocol.com/registry/v1/latest/registry.json"; L75: const DEFAULT_TIMEOUT_MS = 4500; ... L79: try { L80: return RegistryDocSchema.parse(JSON.parse(readFileSync(file, "utf8"))); L81: } catch {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/acp-host-Cg7JjBEn.jsView on unpkg · L7

•matchType = previous_version_dangerous_delta matchedPackage = @agentconnect.md/daemon@1.4.0 matchedIdentity = npm:QGFnZW50Y29ubmVjdC5tZC9kYWVtb24:1.4.0 similarity = 0.833 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/acp-host-Cg7JjBEn.jsView on unpkg

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/acp-host-Cg7JjBEn.jsView on unpkg · L7

dist/service-BQVw7wbz.jsView file

3import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs"; L4: import { execFile } from "node:child_process"; L5: import { homedir } from "node:os"; ... L9: const defaultExec = (cmd, args) => new Promise((resolve) => { L10: execFile(cmd, args, (err, stdout, stderr) => { L11: resolve({ ... L20: /** macOS launchd controller. Writes a LaunchAgent plist that runs L21: * `<node> <cli-entry> run`, and drives it with `launchctl bootstrap/bootout` L22: * (falling back to legacy `load/unload` on older macOS). */ ... L234: const root = resolveRoot(opts.root); L235: return pickController(opts.platform ?? process.platform, { L236: root,

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/service-BQVw7wbz.jsView on unpkg · L3

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2590022 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2590022 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg

Findings

3 High6 Medium6 Low

HighSandbox Evasion Gated Capabilitydist/acp-host-Cg7JjBEn.js

HighOversized Source Filedist/index.js

HighPrevious Version Dangerous Deltadist/acp-host-Cg7JjBEn.js

MediumDynamic Requiredist/bridge-NEdX_EzI.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/service-BQVw7wbz.js

MediumOversized Cli Entrypointdist/index.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/bridge-NEdX_EzI.js

LowWeak Cryptodist/acp-host-Cg7JjBEn.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

dist/bridge-NEdX_EzI.jsView file

Lines 5301-5380javascript

5301 this.localRefs = env.localRefs;

5302 this.meta = env.meta;

5303 this.$async = schema === null || schema === void 0 ? void 0 : schema.$async;

5304 this.refs = {};

5305 }

5306 };

5307 exports.SchemaEnv = SchemaEnv;

5308 function compileSchema(sch) {

5309 const _sch = getCompilingSchema.call(this, sch);

5310 if (_sch) return _sch;

5311 const rootId = (0, resolve_1.getFullPath)(this.opts.uriResolver, sch.root.baseId);

5312 const { es5, lines } = this.opts.code;

5313 const { ownProperties } = this.opts;

5314 const gen = new codegen_1.CodeGen(this.scope, {

5315 es5,

5316 lines,

5317 ownProperties

5318 });

5319 let _ValidationError;

5320 if (sch.$async) _ValidationError = gen.scopeValue("Error", {

5321 ref: validation_error_1.default,

5322 code: (0, codegen_1._)`require("ajv/dist/runtime/validation_error").default`

5323 });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bridge-NEdX_EzI.jsView on unpkg · L5321

5324 const validateName = gen.scopeName("validate");

5325 sch.validateName = validateName;

5326 const schemaCxt = {

5327 gen,

5328 allErrors: this.opts.allErrors,

5329 data: names_1.default.data,

5330 parentData: names_1.default.parentData,

5331 parentDataProperty: names_1.default.parentDataProperty,

5332 dataNames: [names_1.default.data],

5333 dataPathArr: [codegen_1.nil],

5334 dataLevel: 0,

5335 dataTypes: [],

5336 definedProperties: /* @__PURE__ */ new Set(),

5337 topSchemaRef: gen.scopeValue("schema", this.opts.code.source === true ? {

5338 ref: sch.schema,

5339 code: (0, codegen_1.stringify)(sch.schema)

5340 } : { ref: sch.schema }),

5341 validateName,

5342 ValidationError: _ValidationError,

5343 schema: sch.schema,

5344 schemaEnv: sch,

5345 rootId,

5346 baseId: sch.baseId || rootId,

5347 schemaPath: codegen_1.nil,

5348 errSchemaPath: sch.schemaPath || (this.opts.jtd ? "" : "#"),

5349 errorPath: (0, codegen_1._)`""`,

5350 opts: this.opts,

5351 self: this

5352 };

5353 let sourceCode;

5354 try {

5355 this._compilations.add(sch);

5356 (0, validate_1.validateFunctionCode)(schemaCxt);

5357 gen.optimize(this.opts.code.optimize);

5358 const validateCode = gen.toString();

5359 sourceCode = `${gen.scopeRefs(names_1.default.scope)}return ${validateCode}`;

5360 if (this.opts.code.process) sourceCode = this.opts.code.process(sourceCode, sch);

5361 const validate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode)(this, this.scope.get());

5362 this.scope.value(validateName, { ref: validate });

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/bridge-NEdX_EzI.jsView on unpkg · L5360

5363 validate.errors = null;

5364 validate.schema = sch.schema;

5365 validate.schemaEnv = sch;

5366 if (sch.$async) validate.$async = true;

5367 if (this.opts.code.source === true) validate.source = {

5368 validateName,

5369 validateCode,

5370 scopeValues: gen._values

5371 };

5372 if (this.opts.unevaluated) {

5373 const { props, items } = schemaCxt;

5374 validate.evaluated = {

5375 props: props instanceof codegen_1.Name ? void 0 : props,

5376 items: items instanceof codegen_1.Name ? void 0 : items,

5377 dynamicProps: props instanceof codegen_1.Name,

5378 dynamicItems: items instanceof codegen_1.Name

5379 };

5380 if (validate.source) validate.source.evaluated = (0, codegen_1.stringify)(validate.evaluated);

dist/acp-host-Cg7JjBEn.jsView file

Lines 1-27javascript

1import { i as __require, o as __toESM, t as __commonJSMin } from "./rolldown-runtime-CE-6LUnI.js";

2import { t as require_src$1 } from "./src-DDtlVutj.js";

3import { S as NEVER, _ as union, c as intersection, d as number, f as object, g as string, h as

dist/service-BQVw7wbz.jsView file

Lines 1-23javascript

1import { a as logsDir, l as resolveRoot, n as daemonLogPath } from "./paths-DEcUO8lC.js";

2import { dirname, join } from "node:path";

3import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

4import { execFile } from "node:child_process";

5import

dist/index.jsView file

•path = dist/index.js kind = oversized_source_file sizeBytes = 2590022 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/index.jsView on unpkg

•path = dist/index.js kind = oversized_cli_entrypoint sizeBytes = 2590022 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/index.jsView on unpkg