registry / @agentvault/openai-bridge / 0.1.0
@agentvault/openai-bridge@0.1.0
AgentVault OpenAI Codex bridge for encrypted owner messages and rooms
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Oversized source lightweight scan
dist/index.js4.69 MB file, sampled 256 KB
FilesystemNetworkChildProcessEnvironmentVarsCryptoShellWebSocketHighEntropyStringsUrlStringsapi.agentvault.chatwww.apple.com
Source & flagged code
6 flaggeddist/index.jsView file
120// src/driver.ts
L121: import { spawn, execFile } from "node:child_process";
L122: import { constants as constants2 } from "node:fs";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.js:
await walk(join(layout.codex, "sessions"), 0);
import { mkdir, chmod, readFile, writeFile, rename, access, realpath } from "node:fs/promises";
await writeFile(temporary, value, { mode: 384, flag: "wx" });
return { PATH: "/usr/bin:/bin", HOME: layout.home, CODEX_HOME: layout.codex, TMPDIR: layout.tmp };
args.push("-c", `skills.config=[${["imagegen", "openai-docs", "plugin-creator", "skill-creator", "sk[redacted]"].map((name) => `{path=${JSON.stringify(join2(layout.codex, "skill...
Dedicated login: ${await exists(join3(layout.codex, "auth.json")) ? "present (not validated)" : "missing; run login"}
if (!await exists(join3(l
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.jsView on unpkg44}
L45: async function verifyFinalReply(layout, id, stdoutText, before) {
L46: try {
...
L61: throw invalid();
L62: segment = bytes.toString("utf8");
L63: } finally {
...
L120: // src/driver.ts
L121: import { spawn, execFile } from "node:child_process";
L122: import { constants as constants2 } from "node:fs";
...
L136: }
L137: async function atomicPrivateWrite(path2, value) {
L138: const temporary = `${path2}.${randomUUID()}.tmp`;
Findings
5 High5 Medium5 Low
HighChild Processdist/index.js
HighShell
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/index.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.js
MediumOversized Cli Entrypointdist/index.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @agentvault/openai-bridge@0.1.0.
See all versions of @agentvault/openai-bridge for other recorded verdicts.
- Review the evidence and your use of @agentvault/openai-bridge@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.