registry / @agentiny-ai/app / 0.0.154

@agentiny-ai/app@0.0.154

Run Agentiny locally — one command, no clone needed

Static Scan Results

scanned 58m ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 5.25 MB of source, external domains: 127.0.0.1, agentiny.tech, json-schema.org, registry.npmjs.org

Source & flagged code

7 flagged

dist/index.jsView file

72import { Command } from "commander"; L73: import { execSync as execSync4, spawnSync, spawn as spawnAsync } from "child_process"; L74: import { join as join8, dirname as dirname3 } from "path";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L72

72Cross-file remote execution chain: dist/index.js spawns dist/cli/index.js; helper contains network access plus dynamic code execution. L72: import { Command } from "commander"; L73: import { execSync as execSync4, spawnSync, spawn as spawnAsync } from "child_process"; L74: import { join as join8, dirname as dirname3 } from "path"; ... L79: import { execSync } from "child_process"; L80: import { createConnection } from "net"; L81: function checkNodeVersion() { ... L91: try { L92: const check = process.platform === "win32" ? `where ${type}` : `which ${type}`; L93: execSync(check, { stdio: "ignore" }); ... L139: function resolveBaseDir() { L140: if (process.env.ALOOK_PROJECT_ROOT) { L141: return join(process.env.ALOOK_PROJECT_ROOT, ".agentiny", "self-hosted");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L72

dist/cli/index.jsView file

Source & flagged code

7 flagged · loading source

dist/index.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code