registry / @agentskit/sandbox / 0.5.2

@agentskit/sandbox@0.5.2

Secure code execution for AgentsKit agents.

Static Scan Results

scanned 16h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 63.5 KB of source

Source & flagged code

2 flagged

dist/web/index.jsView file

Lines 17-57javascript

17 `

18self.onmessage = async (event) => {

19 const code = event.data && event.data.code

20 const emit = (stream, parts) => {

21 const data = parts

22 .map((p) => {

23 if (typeof p === 'string') return p

24 try { return JSON.stringify(p) } catch { return String(p) }

25 })

26 .join(' ')

27 self.postMessage({ type: 'chunk', stream, data: data + '\\n' })

28 }

29 const origLog = console.log

30 console.log = (...args) => emit('stdout', args)

31 console.info = (...args) => emit('stdout', args)

32 console.debug = (...args) => emit('stdout', args)

33 console.warn = (...args) => emit('stderr', args)

34 console.error = (...args) => emit('stderr', args)

35 let exitCode = 0

36 let stderr = ''

37 try {

38 const fn = new Function('return (async () => {' + code + '\\n})()')

39 await fn()

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web/index.jsView on unpkg · L37

40 } catch (err) {

41 exitCode = 1

42 stderr = err && err.stack ? String(err.stack) : String(err)

43 self.postMessage({ type: 'chunk', stream: 'stderr', data: stderr + '\\n' })

44 } finally {

45 console.log = origLog

46 }

47 self.postMessage({ type: 'done', exitCode, stderr })

48}

49`

50);

51function spawnWorker(env) {

52 const blob = new env.Blob([WORKER_RUNNER_SOURCE], {

53 type: "application/javascript"

54 });

55 const objectUrl = env.URL.createObjectURL(blob);

56 const worker = new env.Worker(objectUrl, { type: "classic" });

57 return { worker, objectUrl, env };

dist/sandbox.cjsView file

Lines 1-22javascript

1'use strict';

3var core = require('@agentskit/core');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/sandbox.cjsView on unpkg · L2

5var __defProp = Object.defineProperty;

6var __getOwnPropNames = Object.getOwnPropertyNames;

Source & flagged code

2 flagged · loading source

dist/web/index.jsView file

37try { L38: const fn = new Function('return (async () => {' + code + '\\n})()') L39: await fn()

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web/index.jsView on unpkg · L37

dist/sandbox.cjsView file

2package = @agentskit/sandbox; repositoryIdentity = agentskit; dependency = @agentskit/core L2: L3: var core = require('@agentskit/core'); L4:

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/sandbox.cjsView on unpkg · L2

Findings

1 High2 Medium4 Low

HighCopied Package Dependency Bridgedist/sandbox.cjs

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/web/index.js

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

dist/web/index.jsView file

Lines 17-57javascript

17 `

18self.onmessage = async (event) => {

19 const code = event.data && event.data.code

20 const emit = (stream, parts) => {

21 const data = parts

22 .map((p) => {

23 if (typeof p === 'string') return p

24 try { return JSON.stringify(p) } catch { return String(p) }

25 })

26 .join(' ')

27 self.postMessage({ type: 'chunk', stream, data: data + '\\n' })

28 }

29 const origLog = console.log

30 console.log = (...args) => emit('stdout', args)

31 console.info = (...args) => emit('stdout', args)

32 console.debug = (...args) => emit('stdout', args)

33 console.warn = (...args) => emit('stderr', args)

34 console.error = (...args) => emit('stderr', args)

35 let exitCode = 0

36 let stderr = ''

37 try {

38 const fn = new Function('return (async () => {' + code + '\\n})()')

39 await fn()

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web/index.jsView on unpkg · L37

40 } catch (err) {

41 exitCode = 1

42 stderr = err && err.stack ? String(err.stack) : String(err)

43 self.postMessage({ type: 'chunk', stream: 'stderr', data: stderr + '\\n' })

44 } finally {

45 console.log = origLog

46 }

47 self.postMessage({ type: 'done', exitCode, stderr })

48}

49`

50);

51function spawnWorker(env) {

52 const blob = new env.Blob([WORKER_RUNNER_SOURCE], {

53 type: "application/javascript"

54 });

55 const objectUrl = env.URL.createObjectURL(blob);

56 const worker = new env.Worker(objectUrl, { type: "classic" });

57 return { worker, objectUrl, env };

dist/sandbox.cjsView file

Lines 1-22javascript

1'use strict';

3var core = require('@agentskit/core');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/sandbox.cjsView on unpkg · L2

5var __defProp = Object.defineProperty;

6var __getOwnPropNames = Object.getOwnPropertyNames;