registry / @asterworks/agent-audit / 0.2.0

@asterworks/agent-audit@0.2.0

Local-first audit and security observability for AI coding agents (Claude Code + Codex) — records what agents did, detects risky behavior, keeps everything on your machine.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 994 KB of source, external domains: 21st.dev, api.example.com, api.slack.com, console.anthropic.com, console.aws.amazon.com, console.cloud.google.com, console.neon.tech, dashboard.stripe.com, fb.me, github.com, higgsfield.ai, platform.openai.com, reactjs.org, supabase.com, www.apple.com, www.w3.org

Source & flagged code

4 flagged

dist-cli/index.jsView file

Lines 12-52javascript

12// src/core/branding.ts

13var PRODUCT_NAME, CLI_NAME, LEGACY_CLI_NAME, DATA_DIR_NAME, LEGACY_DATA_DIR_NAME, DB_FILE_NAME, LAUNCHD_LABEL, LEGACY_LAUNCHD_LABEL, FENCE_MARKER, FENCE_START, FENCE_END, LEGACY_FENCE_MARKER, LEGACY_FENCE_START, LEGACY_FENCE_END, MIGRATION_MARKER_FILE, LEGACY_FORWARD_MARKER_FILE, REPO_URL;

14var init_branding = __esm({

15 "src/core/branding.ts"() {

16 "use strict";

17 PRODUCT_NAME = "Aster Agent Audit";

18 CLI_NAME = "aster-audit";

19 LEGACY_CLI_NAME = "aster-agent";

20 DATA_DIR_NAME = ".aster-agent-audit";

21 LEGACY_DATA_DIR_NAME = ".aster-agent-console";

22 DB_FILE_NAME = "agent-console.db";

23 LAUNCHD_LABEL = "com.asterworks.agent-audit";

24 LEGACY_LAUNCHD_LABEL = "com.asterworks.agent-console";

25 FENCE_MARKER = "aster-agent-audit";

26 FENCE_START = "# >>> aster-agent-audit (managed) >>>";

27 FENCE_END = "# <<< aster-agent-audit (managed) <<<";

28 LEGACY_FENCE_MARKER = "aster-agent-console";

29 LEGACY_FENCE_START = "# >>> aster-agent-console (managed) >>>";

30 LEGACY_FENCE_END = "# <<< aster-agent-console (managed) <<<";

31 MIGRATION_MARKER_FILE = "migration.json";

32 LEGACY_FORWARD_MARKER_FILE = "MIGRATED.json";

33 REPO_URL = "https://github.com/Aster-Works/aster-agent-console";

34 }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L32

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L32

35});

37// src/core/integrity/index.ts

38import { createHash } from "crypto";

39function canonicalize(value) {

40 return JSON.stringify(sortValue(value));

41}

42function sortValue(v) {

43 if (Array.isArray(v)) return v.map(sortValue);

44 if (v && typeof v === "object") {

45 const out2 = {};

46 for (const k of Object.keys(v).sort()) {

47 const x = v[k];

48 if (x !== void 0) out2[k] = sortValue(x);

49 }

50 return out2;

51 }

52 return v;

Lines 1101-1141javascript

1101 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

1102 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

1103 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]

Source & flagged code

4 flagged · loading source

dist-cli/index.jsView file

1121patternName = private_key_rsa severity = critical line = 1121 matchedText = if (kind...d]";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist-cli/index.jsView on unpkg · L1121

1121patternName = private_key_rsa severity = critical line = 1121 matchedText = if (kind...d]";

Critical

Secret Pattern

RSA private key in dist-cli/index.js

dist-cli/index.jsView on unpkg · L1121

32Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L32: LEGACY_FORWARD_MARKER_FILE = "MIGRATED.json"; L33: REPO_URL = "https://github.com/Aster-Works/aster-agent-console"; L34: } ... L130: import { homedir } from "os"; L131: function resolveConfigDir(home = homedir()) { L132: const next = join(home, DATA_DIR_NAME); ... L436: fingerprint: String(r.fingerprint), L437: definition: JSON.parse(String(r.definition_json)), L438: firstSeen: String(r.first_seen), ... L469: if (row.type === "test_result") { L470: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L471: else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L32

32LEGACY_FORWARD_MARKER_FILE = "MIGRATED.json"; L33: REPO_URL = "https://github.com/Aster-Works/aster-agent-console"; L34: } ... L130: import { homedir } from "os"; L131: function resolveConfigDir(home = homedir()) { L132: const next = join(home, DATA_DIR_NAME); ... L436: fingerprint: String(r.fingerprint), L437: definition: JSON.parse(String(r.definition_json)), L438: firstSeen: String(r.first_seen), ... L469: if (row.type === "test_result") { L470: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L471: else testsPassed += 1;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L32

Findings

2 Critical1 High5 Medium6 Low

CriticalCritical Secretdist-cli/index.js

CriticalSecret Patterndist-cli/index.js

HighEntrypoint Build Divergencedist-cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist-cli/index.js

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

4 flagged

dist-cli/index.jsView file

Lines 12-52javascript

12// src/core/branding.ts

14var init_branding = __esm({

15 "src/core/branding.ts"() {

16 "use strict";

17 PRODUCT_NAME = "Aster Agent Audit";

18 CLI_NAME = "aster-audit";

19 LEGACY_CLI_NAME = "aster-agent";

20 DATA_DIR_NAME = ".aster-agent-audit";

21 LEGACY_DATA_DIR_NAME = ".aster-agent-console";

22 DB_FILE_NAME = "agent-console.db";

23 LAUNCHD_LABEL = "com.asterworks.agent-audit";

24 LEGACY_LAUNCHD_LABEL = "com.asterworks.agent-console";

25 FENCE_MARKER = "aster-agent-audit";

26 FENCE_START = "# >>> aster-agent-audit (managed) >>>";

27 FENCE_END = "# <<< aster-agent-audit (managed) <<<";

28 LEGACY_FENCE_MARKER = "aster-agent-console";

29 LEGACY_FENCE_START = "# >>> aster-agent-console (managed) >>>";

30 LEGACY_FENCE_END = "# <<< aster-agent-console (managed) <<<";

31 MIGRATION_MARKER_FILE = "migration.json";

32 LEGACY_FORWARD_MARKER_FILE = "MIGRATED.json";

33 REPO_URL = "https://github.com/Aster-Works/aster-agent-console";

34 }

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L32

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L32

35});

37// src/core/integrity/index.ts

38import { createHash } from "crypto";

39function canonicalize(value) {

40 return JSON.stringify(sortValue(value));

41}

42function sortValue(v) {

43 if (Array.isArray(v)) return v.map(sortValue);

44 if (v && typeof v === "object") {

45 const out2 = {};

46 for (const k of Object.keys(v).sort()) {

47 const x = v[k];

48 if (x !== void 0) out2[k] = sortValue(x);

49 }

50 return out2;

51 }

52 return v;

Lines 1101-1141javascript

1101 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

1102 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

1103 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]