registry / @ai-support-agent/cli / 0.5.16
@ai-support-agent/cli@0.5.16
⚠ Under reviewAI Support Agent CLI client
Static Scan Results
scanned 5d ago · by rust-scannerStatic analysis completed at 93.0% confidence. No malicious behavior was detected; 19 low-signal pattern(s) were surfaced and cleared.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
11 flaggeddist/backup/backup-database-dump.jsView file
85patternName = generic_password
severity = medium
line = 85
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/backup/backup-database-dump.jsView on unpkg · L85dist/terminal/terminal-session.jsView file
40Trigger-reachable persistence chain: manifest.main -> dist/index.js -> dist/agent-runner.js -> dist/terminal/terminal-session.js
L40: const path = __importStar(require("path"));
L41: const child_process_1 = require("child_process");
L42: const constants_1 = require("../constants");
...
L75: * 直接チェックする。Docker コンテナ内の Node.js プロセスは shell init を経由せず
L76: * 起動するため、process.env.PATH がインタラクティブシェルの PATH と異なり
L77: * spawnSync がバイナリを見つけられないことがある。
...
L104: *
L105: * API サーバーが base64 エンコードされた PEM 秘密鍵をこの変数名で送ってくる。
L106: * TerminalSession はこれを検出してファイルに書き出し、GIT_SSH_COMMAND を設定する。
...
L126: * (clear grace timer + remove from map). It is kept separate from the public
L127: * `exitCallback` so that a later `onExit()` registration by the websocket
L128: * handler (which sends the 'exit' frame) does NOT overw
High
Trigger Reachable Persistence
A manifest entrypoint or package-local install chain reaches persistence behavior.
Findings
3 High11 Medium5 Low
HighTrigger Reachable Persistencedist/terminal/terminal-session.js
HighSemantic Analysis Limiteddist/agent-transport.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/vault/runtime.js
MediumSecret Patterndist/backup/backup-database-dump.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/terminal/terminal-session.js
MediumShips Build Helperdocker/bashrc-extra.sh
MediumStructural Risk Force Deep Review
MediumSecret Patternansible/roles/database/tasks/main.yml
MediumSecret Patternansible/roles/database/tasks/main.yml
MediumSecret Patternansible/roles/database/tasks/main.yml
Affected versions and remediation
This report applies to @ai-support-agent/cli@0.5.16.
See all versions of @ai-support-agent/cli for other recorded verdicts.
- Review the evidence and your use of @ai-support-agent/cli@0.5.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.