registry / @alan-zhao/yolk-pi-web / 0.7.12

@alan-zhao/yolk-pi-web@0.7.12

yolk pi web WebChat workspace for the pi coding agent

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 338 KB of source, external domains: 127.0.0.1, example.com, example.local

Source & flagged code

6 flagged

scripts/test-terminal-ssh-config.mjsView file

Lines 88-116javascript

88for (const forbiddenUiField of ["privateKeyPem", "proxyPassword"]) {

89 assertNotIncludes(profilePicker, forbiddenUiField, `profile picker must not render ${forbiddenUiField}`);

90 assertNotIncludes(terminalPanel, forbiddenUiField, `terminal panel must not render ${forbiddenUiField}`);

91}

93// Profile CRUD/preflight routes must reject secrets and return only non-secret/redacted data.

94assertIncludes(profileStore, "FORBIDDEN_SECRET_FIELDS", "profile CRUD helper has route-level secret field rejection");

95for (const secret of ["privateKeyPem", "password", "passphrase", "proxyPassword"]) {

96 assertIncludes(profileStore, secret, `profile CRUD rejects ${secret}`);

97}

98assertIncludes(profileRoute, "createTerminalSshProfile", "profile collection route creates through validated helper");

99assertIncludes(profileIdRoute, "updateTerminalSshProfile", "profile id route updates through validated helper");

100assertIncludes(profileIdRoute, "deleteTerminalSshProfile", "profile id route deletes through profile helper");

101assertIncludes(profileTestRoute, "plan.redacted", "profile resolve API returns redacted launch plan");

102assertNotIncludes(profileTestRoute, "privateKeyPem", "profile test route must not reference private key material");

103assertNotIncludes(profileTestRoute, "proxyPassword", "profile test route must not reference proxy password");

104

105// Dry-run temp cleanup check for the expected temp prefix behavior.

106const tempDir = await mkdtemp(join(tmpdir(), "ypi-terminal-ssh-test-"));

107const secretPath = join(tempDir, "context.json");

108await writeFile(secretPath, JSON.stringify({ password: "sample-secret" }), { mode: 0o600 });

Medium

Secret Pattern

Package contains a possible secret pattern.

scripts/test-terminal-ssh-config.mjsView on unpkg · L108

109if (process.platform !== "win32") {

110 assert.equal(statSync(secretPath).mode & 0o777, 0o600, "secret dry-run file should be 0600");

111}

112await rm(tempDir, { recursive: true, force: true });

113assert.equal(existsSync(tempDir), false, "temp dry-run directory should be removed");

114

115console.log("terminal SSH config/security dry-run checks passed");

116

bin/ypic.jsView file

Lines 6-46javascript

6// Design contract (see docs/architecture/overview.md and the ypic task plan):

7// - `ypic` does NOT self-start a server. On launch it performs a single

8// `GET /api/cli/health` against the configured host:port. If the check

9// fails or the responder is not yolk-pi-web, it prints guidance telling

10// the user to manually start `ypi` / the Web server and exits.

11// - Chat is driven entirely over the existing HTTP/SSE API:

12// POST /api/agent/draft -> create an empty session bound to cwd

13// GET /api/agent/:id/events -> SSE stream of agent events

14// POST /api/agent/:id -> prompt / steer / follow_up / abort / get_state

15// This keeps Studio extension injection, approval gate, JSONL, usage

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 1322 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

.next/server/app/page.jsView file

•path = .next/server/app/page.js kind = payload_in_excluded_dir sizeBytes = 2730128 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/page.jsView on unpkg

•path = .next/server/app/page.js kind = oversized_source_file sizeBytes = 2730128 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

.next/server/app/page.jsView on unpkg

Source & flagged code

6 flagged · loading source

scripts/test-terminal-ssh-config.mjsView file

108patternName = generic_password severity = medium line = 108 matchedText = await wr... });

Medium

Secret Pattern

Package contains a possible secret pattern.

scripts/test-terminal-ssh-config.mjsView on unpkg · L108

bin/ypic.jsView file

26// eslint-disable-next-line @typescript-eslint/no-require-imports L27: const { parseArgs } = require("util"); L28: // eslint-disable-next-line @typescript-eslint/no-require-imports

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/ypic.jsView on unpkg · L26

scripts/start-pi-web-proxy.ps1View file

•path = scripts/start-pi-web-proxy.ps1 kind = build_helper sizeBytes = 1322 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/start-pi-web-proxy.ps1View on unpkg

.next/server/app/favicon.ico.bodyView file

•path = .next/server/app/favicon.ico.body kind = high_entropy_blob sizeBytes = 22542 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

.next/server/app/favicon.ico.bodyView on unpkg

.next/server/app/page.jsView file

•path = .next/server/app/page.js kind = payload_in_excluded_dir sizeBytes = 2730128 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.next/server/app/page.jsView on unpkg

•path = .next/server/app/page.js kind = oversized_source_file sizeBytes = 2730128 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

.next/server/app/page.jsView on unpkg

Findings

3 High6 Medium5 Low

HighShips High Entropy Blob.next/server/app/favicon.ico.body

HighPayload In Excluded Dir.next/server/app/page.js

HighOversized Source File.next/server/app/page.js

MediumSecret Patternscripts/test-terminal-ssh-config.mjs

MediumDynamic Requirebin/ypic.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/start-pi-web-proxy.ps1

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings