registry / @agentdock/daemon / 0.0.65
@agentdock/daemon@0.0.65
⚠ Under reviewPC daemon + CLI for AgentDock — ACP abstraction, TransportHandler, process management
Static Scan Results
scanned 13m ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
8 flaggeddist/processTree.jsView file
1"use strict";import{exec as t,execSync as n}from"node:child_process";const r=process.platform==="win32";export function killProcessTree(e){r&&e.pid?t(`taskkill /T /F /PID ${e.pid}`...
L2: `)}):e.kill("SIGTERM")}export function killProcessTreeByPid(e){r?t(`taskkill /T /F /PID ${e}`,{windowsHide:!0},s=>{s&&process.stderr.write(`taskkill failed for PID ${e}: ${s.messag...
High
Child Process
Package source references child process execution.
dist/processTree.jsView on unpkg · L1dist/spawnConsole.jsView file
2`)+`\r
L3: `}function b(e){const t=h.join(E(),"tmp");p.mkdirSync(t,{recursive:!0});const o=h.join(t,`spawn-${Date.now()}.ps1`);return p.writeFileSync(o,e,"utf8"),o}export function spawnWithCo...
L4: activate
High
dist/subagentIds.jsView file
Findings
6 High3 Medium6 Low
HighChild Processdist/processTree.js
HighShelldist/spawnConsole.js
HighSame File Env Network Executiondist/ensureDaemon.js
HighCommand Output Exfiltrationdist/ensureDaemon.js
HighTrigger Reachable Command Output Exfiltrationdist/ensureDaemon.js
HighTrigger Reachable Persistencedist/autostart.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/autostart.js
LowScripts Present
LowWeak Cryptodist/subagentIds.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Low
Affected versions and remediation
This report applies to @agentdock/daemon@0.0.65.
See all versions of @agentdock/daemon for other recorded verdicts.
- Review the evidence and your use of @agentdock/daemon@0.0.65 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.