registry / @agentworkforce/deploy / 4.1.16

@agentworkforce/deploy@4.1.16

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 31 file(s), 483 KB of source, external domains: active.example.test, agentrelay.cloud, agentrelay.com, cloud.agentworkforce.com, cloud.example.com, cloud.example.test, connect.example.test, docs.agentworkforce.com, env.example.test, flag.example.test, legacy-env.example.test, origin-preview-pr-113.agentrelay.cloud, origin.agentrelay.cloud, persona.example.test, preview-pr-113.agentrelay.cloud, relayfile.test, some-other-tenant.example.com, staging.agentrelay.cloud

Source & flagged code

3 flagged

dist/modes/sandbox-client.jsView file

Lines 12-59javascript

12 }

13 const daytona = new Daytona(opts);

14 return {

15 async mint(args) {

16 const sandbox = await daytona.create({

17 language: 'typescript',

18 name: args.label,

19 ...(args.env ? { envVars: args.env } : {})

20 });

21 const handle = {

22 id: `byo:${sandbox.id}`,

23 sandboxId: sandbox.id,

24 mode: 'byo',

25 sandbox

26 };

27 return handle;

28 },

29 async uploadBundle(handle, bundle) {

30 const internal = handle;

31 const files = await readBundleFiles(bundle);

32 await internal.sandbox.fs.uploadFiles(files);

33 // Same offline-friendly npm install pattern as the proxy path so

34 // the bundle's runtime dep resolves consistently across modes.

35 const install = await internal.sandbox.process.executeCommand('npm install --prefer-offline --no-audit --no-fund --loglevel=error', SANDBOX_BUNDLE_DIR, undefined, 600);

36 if ((install.exitCode ?? 0) !== 0) {

37 throw new Error(`sandbox(byo): npm install failed (exit ${install.exitCode}): ${install.result?.slice(0, 400) ?? ''}`);

38 }

39 },

40 async exec(handle, command, options) {

41 const internal = handle;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/modes/sandbox-client.jsView on unpkg · L32

High

Child Process

Package source references child process execution.

dist/modes/sandbox-client.jsView on unpkg · L39

42 const result = await internal.sandbox.process.executeCommand(command, options?.cwd, options?.env, options?.timeoutSeconds);

43 return {

44 exitCode: result.exitCode ?? 0,

45 output: result.result ?? ''

46 };

47 },

48 async destroy(handle) {

49 const internal = handle;

50 await internal.sandbox.delete();

51 }

52 };

53}

54export function createProxySandboxClient(opts) {

55 const fetchImpl = opts.fetchImpl ?? fetch;

56 const base = `${opts.cloudUrl.replace(/\/$/, '')}/api/v1/workspaces/${encodeURIComponent(opts.workspaceId)}`;

57 function headers(extra = {}) {

58 return {

59 authorization: `Bearer ${opts.workspaceToken}`,

dist/bundle.test.jsView file

Lines 64-104javascript

64 assert.match(runnerSource, /exported\.launchedBy/);

65 assert.match(runnerSource, /await startRunner\({ persona, agent, deployment, handler/);

66 // bundle output is ES module shape and references the runtime as external

67 const bundleSource = await readFile(result.bundlePath, 'utf8');

Source & flagged code

3 flagged · loading source

dist/modes/sandbox-client.jsView file

39}, L40: async exec(handle, command, options) { L41: const internal = handle;

High

Child Process

Package source references child process execution.

dist/modes/sandbox-client.jsView on unpkg · L39

32await internal.sandbox.fs.uploadFiles(files); L33: // Same offline-friendly npm install pattern as the proxy path so L34: // the bundle's runtime dep resolves consistently across modes. ... L39: }, L40: async exec(handle, command, options) { L41: const internal = handle;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/modes/sandbox-client.jsView on unpkg · L32

dist/bundle.test.jsView file

84await writeFile(path.join(packageDir, 'index.cjs'), [ L85: "const process = require('process');", L86: 'module.exports = process.release.name;',

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle.test.jsView on unpkg · L84

Findings

3 High4 Medium5 Low

HighChild Processdist/modes/sandbox-client.js

HighShell

HighRuntime Package Installdist/modes/sandbox-client.js

MediumDynamic Requiredist/bundle.test.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

3 flagged

dist/modes/sandbox-client.jsView file

Lines 12-59javascript

12 }

13 const daytona = new Daytona(opts);

14 return {

15 async mint(args) {

16 const sandbox = await daytona.create({

17 language: 'typescript',

18 name: args.label,

19 ...(args.env ? { envVars: args.env } : {})

20 });

21 const handle = {

22 id: `byo:${sandbox.id}`,

23 sandboxId: sandbox.id,

24 mode: 'byo',

25 sandbox

26 };

27 return handle;

28 },

29 async uploadBundle(handle, bundle) {

30 const internal = handle;

31 const files = await readBundleFiles(bundle);

32 await internal.sandbox.fs.uploadFiles(files);

33 // Same offline-friendly npm install pattern as the proxy path so

34 // the bundle's runtime dep resolves consistently across modes.

35 const install = await internal.sandbox.process.executeCommand('npm install --prefer-offline --no-audit --no-fund --loglevel=error', SANDBOX_BUNDLE_DIR, undefined, 600);

36 if ((install.exitCode ?? 0) !== 0) {

37 throw new Error(`sandbox(byo): npm install failed (exit ${install.exitCode}): ${install.result?.slice(0, 400) ?? ''}`);

38 }

39 },

40 async exec(handle, command, options) {

41 const internal = handle;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/modes/sandbox-client.jsView on unpkg · L32

High

Child Process

Package source references child process execution.

dist/modes/sandbox-client.jsView on unpkg · L39

42 const result = await internal.sandbox.process.executeCommand(command, options?.cwd, options?.env, options?.timeoutSeconds);

43 return {

44 exitCode: result.exitCode ?? 0,

45 output: result.result ?? ''

46 };

47 },

48 async destroy(handle) {

49 const internal = handle;

50 await internal.sandbox.delete();

51 }

52 };

53}

54export function createProxySandboxClient(opts) {

55 const fetchImpl = opts.fetchImpl ?? fetch;

56 const base = `${opts.cloudUrl.replace(/\/$/, '')}/api/v1/workspaces/${encodeURIComponent(opts.workspaceId)}`;

57 function headers(extra = {}) {

58 return {

59 authorization: `Bearer ${opts.workspaceToken}`,

dist/bundle.test.jsView file

Lines 64-104javascript

64 assert.match(runnerSource, /exported\.launchedBy/);

65 assert.match(runnerSource, /await startRunner\({ persona, agent, deployment, handler/);

66 // bundle output is ES module shape and references the runtime as external

67 const bundleSource = await readFile(result.bundlePath, 'utf8');