registry / @ai2web/core / 0.4.0

@ai2web/core@0.4.0

AI2Web (ai2w) core - types, capability model, manifest builder, validation & AI Readiness scoring.

AI Security Review

scanned 22h ago · by lpm-firewall-ai

A hostname that passes literal validation may resolve to a private/internal address. Calling discover() or executeOperation() can then fetch it and return its response.

Static reason

No blocking static signals were detected.

Trigger

Application calls discover() or executeOperation() with attacker-influenced manifest or operation URLs.

Impact

Potential access to internal HTTP services and disclosure of their responses.

Mechanism

DNS-rebinding-capable SSRF through hostname-only URL validation.

Rationale

No malicious install-time or persistence behavior was found, but the exported SSRF guard has a concrete hostname-resolution bypass on attacker-influenced URLs. This is a security vulnerability rather than evidence of malicious intent.

Evidence

dist/safety.jsdist/discover.jsdist/execute.jspackage.jsonREADME.mddist/index.jsdist/builder.jsdist/export.jsdist/negotiate.jsdist/schema.jsdist/validate.jsdist/badge.js

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Critical Vulnerability with false-positive risk.

@ai2web/core@0.4.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code