registry / @agentworkforce/cli / 4.1.18

@agentworkforce/cli@4.1.18

A thin command-line front end for the workload-router. Spawns the harness CLI (`claude`, `codex`, `opencode`, `grok`) configured by a selected **persona** from the project-local layer, configured source directories, or the small internal built-in system c

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 34 file(s), 603 KB of source, external domains: agentrelay.com, c.test, cloud.example.test, docs.claude.com, example.com, origin.agentrelay.cloud

Source & flagged code

2 flagged

dist/invoke-command.jsView file

Lines 278-318javascript

278async function runInvokeWithOptions(opts, io) {

279 const preflight = await preflightPersona(opts.personaPath);

280 for (const warning of preflight.warnings) {

281 io.stderr(`warn: ${warning}\n`);

282 }

283 // Stage inside the persona's tree (not os.tmpdir) — the bundle leaves

284 // `@agentworkforce/runtime` external, so Node must be able to walk up

285 // from the bundle to a node_modules that provides it, exactly like

286 // deploy's `.workforce/build/` convention.

287 const buildRoot = path.join(preflight.personaDir, '.workforce', 'invoke-build');

288 await mkdir(buildRoot, { recursive: true });

289 const buildDir = await mkdtemp(path.join(buildRoot, `${preflight.persona.id}-`));

290 try {

291 const bundle = await bundleStager.stage({

292 personaPath: preflight.personaPath,

293 persona: preflight.persona,

294 outDir: buildDir

295 });

296 // Cache-bust the import so repeated invokes in one process (tests,

297 // watch flows) load the freshly staged bundle, not the ESM cache.

298 const bundleUrl = `${pathToFileURL(bundle.bundlePath).href}?invoke=${randomUUID()}`;

299 const userModule = (await import(bundleUrl));

300 const handler = extractBundleHandler(userModule, preflight.persona.id);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/invoke-command.jsView on unpkg · L298

301 const fixtureRaw = await readFile(opts.fixturePath, 'utf8').catch((err) => {

302 if (err.code === 'ENOENT') {

303 throw new Error(`fixture not found at ${opts.fixturePath}`);

304 }

305 throw err;

306 });

307 const envelopes = parseFixtureEnvelopes(fixtureRaw, path.basename(opts.fixturePath));

308 const seeds = await loadSeeds(opts.seeds);

309 const result = await simulateInvocation({

310 persona: preflight.persona,

311 handler,

312 envelopes,

313 ...(opts.workspaceId ? { workspaceId: opts.workspaceId } : {}),

314 ...(opts.inputs ? { agent: { inputValues: opts.inputs } } : {}),

315 ...(seeds ? { files: seeds } : {})

316 });

317 io.stderr(renderHumanSummary(result));

318 const json = `${JSON.stringify(result, null, 2)}\n`;

dist/cli.jsView file

Lines 25-55javascript

25 }

26 const { main: fullMain } = await import('./cli-impl.js');

27 await fullMain();

28}

29// Only run main when invoked as the CLI entry, not when imported by tests.

30// Node ESM: import.meta.url is the module URL; argv[1] is the entry script

31// path, which may be relative (e.g. `node ./dist/cli.js`) and pathToFileURL

Source & flagged code

2 flagged · loading source

dist/invoke-command.jsView file

298const bundleUrl = `${pathToFileURL(bundle.bundlePath).href}?invoke=${randomUUID()}`; L299: const userModule = (await import(bundleUrl)); L300: const handler = extractBundleHandler(userModule, preflight.persona.id);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/invoke-command.jsView on unpkg · L298

dist/cli.jsView file

45package = @agentworkforce/cli; repositoryIdentity = workforce; dependency = @agentworkforce/persona-kit L45: main().catch(async (err) => { L46: const { MissingPersonaInputError } = await import('@agentworkforce/persona-kit'); L47: if (err instanceof MissingPersonaInputError) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/cli.jsView on unpkg · L45

Findings

1 High4 Medium5 Low

HighCopied Package Dependency Bridgedist/cli.js

MediumDynamic Requiredist/invoke-command.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/invoke-command.jsView file

Lines 278-318javascript

278async function runInvokeWithOptions(opts, io) {

279 const preflight = await preflightPersona(opts.personaPath);

280 for (const warning of preflight.warnings) {

281 io.stderr(`warn: ${warning}\n`);

282 }

283 // Stage inside the persona's tree (not os.tmpdir) — the bundle leaves

284 // `@agentworkforce/runtime` external, so Node must be able to walk up

285 // from the bundle to a node_modules that provides it, exactly like

286 // deploy's `.workforce/build/` convention.

287 const buildRoot = path.join(preflight.personaDir, '.workforce', 'invoke-build');

288 await mkdir(buildRoot, { recursive: true });

289 const buildDir = await mkdtemp(path.join(buildRoot, `${preflight.persona.id}-`));

290 try {

291 const bundle = await bundleStager.stage({

292 personaPath: preflight.personaPath,

293 persona: preflight.persona,

294 outDir: buildDir

295 });

296 // Cache-bust the import so repeated invokes in one process (tests,

297 // watch flows) load the freshly staged bundle, not the ESM cache.

298 const bundleUrl = `${pathToFileURL(bundle.bundlePath).href}?invoke=${randomUUID()}`;

299 const userModule = (await import(bundleUrl));

300 const handler = extractBundleHandler(userModule, preflight.persona.id);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/invoke-command.jsView on unpkg · L298

301 const fixtureRaw = await readFile(opts.fixturePath, 'utf8').catch((err) => {

302 if (err.code === 'ENOENT') {

303 throw new Error(`fixture not found at ${opts.fixturePath}`);

304 }

305 throw err;

306 });

307 const envelopes = parseFixtureEnvelopes(fixtureRaw, path.basename(opts.fixturePath));

308 const seeds = await loadSeeds(opts.seeds);

309 const result = await simulateInvocation({

310 persona: preflight.persona,

311 handler,

312 envelopes,

313 ...(opts.workspaceId ? { workspaceId: opts.workspaceId } : {}),

314 ...(opts.inputs ? { agent: { inputValues: opts.inputs } } : {}),

315 ...(seeds ? { files: seeds } : {})

316 });

317 io.stderr(renderHumanSummary(result));

318 const json = `${JSON.stringify(result, null, 2)}\n`;

dist/cli.jsView file

Lines 25-55javascript

25 }

26 const { main: fullMain } = await import('./cli-impl.js');

27 await fullMain();

28}

29// Only run main when invoked as the CLI entry, not when imported by tests.

30// Node ESM: import.meta.url is the module URL; argv[1] is the entry script

31// path, which may be relative (e.g. `node ./dist/cli.js`) and pathToFileURL