registry / @agentvault/agentvault / 0.23.63
@agentvault/agentvault@0.23.63
⚠ Under reviewEnd-to-end encrypted messaging for AI agents: connects an agent to its owner, rooms and other agents on AgentVault.
Static Scan Results
scanned 4d ago · by rust-scannerStatic analysis completed at 72.0% confidence. No malicious behavior was detected; 18 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsPossibleObfuscationUrlStrings
Oversized source lightweight scan
dist/cli.js4.28 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsUrlStrings127.0.0.1api.agentvault.chatgist.github.comgithub.comjson-schema.orgmathiasbynens.be
Source & flagged code
9 flaggeddist/cli.jsView file
93750});
L93751: import { execSync } from "node:child_process";
L93752: import { existsSync as existsSync2, readFileSync as readFileSync4, writeFileSync, chmodSync, readdirSync, statSync } from "node:fs";
High
93863try {
L93864: execSync("curl -sf --max-time 3 http://127.0.0.1:18789/", { stdio: "pipe" });
L93865: return { name: "Gateway port (18789)", status: "pass", message: "Responding" };
...
L93877: }
L93878: const home = process.env.HOME ?? "";
L93879: const warnings = [];
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L93863129// ../../node_modules/libsodium-sumo/dist/modules-sumo-esm/libsodium-sumo.mjs
L130: var __filename, __dirname, url, path, Module, Module, root, window_, crypto_, randomValuesStandard, crypto2, randomValueNodeJS, _Module, libsodium_sumo_default;
L131: var init_libsodium_sumo = __esm({
...
L224: Module2.useBackupModule = function() {
L225: return new Promise(function(resolve6, reject2) {
L226: var Module3 = {};
...
L277: quit_2 = (status, toThrow) => {
L278: process.exitCode = status;
L279: throw toThrow;
...
L291: xhr.responseType = "arraybuffer";
L292: xhr.send(null);
L293: return new Uint8Array(xhr.response);
Findings
7 High6 Medium5 Low
HighChild Processdist/cli.js
HighShell
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumDynamic Requiredist/openclaw-entry.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.js
MediumOversized Cli Entrypointdist/cli.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @agentvault/agentvault@0.23.63.
See all versions of @agentvault/agentvault for other recorded verdicts.
- Review the evidence and your use of @agentvault/agentvault@0.23.63 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.