registry / @asterworks/agent-audit / 0.2.0

@asterworks/agent-audit@0.2.0

Local-first audit and security observability for AI coding agents (Claude Code + Codex) — records what agents did, detects risky behavior, keeps everything on your machine.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 994 KB of source, external domains: 21st.dev, api.example.com, api.slack.com, console.anthropic.com, console.aws.amazon.com, console.cloud.google.com, console.neon.tech, dashboard.stripe.com, fb.me, github.com, higgsfield.ai, platform.openai.com, reactjs.org, supabase.com, www.apple.com, www.w3.org

Source & flagged code

4 flagged

dist-cli/index.jsView file

Lines 12-52javascript

12// src/core/branding.ts

13var PRODUCT_NAME, CLI_NAME, LEGACY_CLI_NAME, DATA_DIR_NAME, LEGACY_DATA_DIR_NAME, DB_FILE_NAME, LAUNCHD_LABEL, LEGACY_LAUNCHD_LABEL, FENCE_MARKER, FENCE_START, FENCE_END, LEGACY_FENCE_MARKER, LEGACY_FENCE_START, LEGACY_FENCE_END,

Source & flagged code

4 flagged · loading source

dist-cli/index.jsView file

1121patternName = private_key_rsa severity = critical line = 1121 matchedText = if (kind...d]";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist-cli/index.jsView on unpkg · L1121

1121patternName = private_key_rsa severity = critical line = 1121 matchedText = if (kind...d]";

Critical

Secret Pattern

RSA private key in dist-cli/index.js

dist-cli/index.jsView on unpkg · L1121

32Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L32: LEGACY_FORWARD_MARKER_FILE = "MIGRATED.json"; L33: REPO_URL = "https://github.com/Aster-Works/aster-agent-console"; L34: } ... L130: import { homedir } from "os"; L131: function resolveConfigDir(home = homedir()) { L132: const next = join(home, DATA_DIR_NAME); ... L436: fingerprint: String(r.fingerprint), L437: definition: JSON.parse(String(r.definition_json)), L438: firstSeen: String(r.first_seen), ... L469: if (row.type === "test_result") { L470: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L471: else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L32

32LEGACY_FORWARD_MARKER_FILE = "MIGRATED.json"; L33: REPO_URL = "https://github.com/Aster-Works/aster-agent-console"; L34: } ... L130: import { homedir } from "os"; L131: function resolveConfigDir(home = homedir()) { L132: const next = join(home, DATA_DIR_NAME); ... L436: fingerprint: String(r.fingerprint), L437: definition: JSON.parse(String(r.definition_json)), L438: firstSeen: String(r.first_seen), ... L469: if (row.type === "test_result") { L470: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L471: else testsPassed += 1;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L32

Findings

2 Critical1 High5 Medium6 Low

CriticalCritical Secretdist-cli/index.js

CriticalSecret Patterndist-cli/index.js

HighEntrypoint Build Divergencedist-cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist-cli/index.js

MediumProtestware

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Lines 1101-1141javascript

1101 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

1102 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

1103 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/g, keepTail: 4 },

1104 { kind: "github_token", re: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, keepTail: 4 },

1105 { kind: "supabase_key", re: /\bsb(?:p|s|secret)_[A-Za-z0-9_-]{20,}\b/g, keepTail: 4 },

1106 { kind: "jwt", re: /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, keepTail: 4 },

1107 { kind: "private_key", re: /\bAKIA[0-9A-Z]{16}\b/g, keepTail: 4 },

1108 // AWS access key id

1109 { kind: "url_credential", re: /\b([a-z][a-z0-9+.-]*):\/\/[^/\s:@]+:([^/\s@]+)@/gi }

1110];

1111var ENV_ASSIGN = /\b([A-Za-z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASSWD|PWD|CREDENTIAL|PRIVATE)[A-Za-z0-9_]*)\s*=\s*("?)([^"\s]{6,})\2/gi;

1112function fingerprint(value) {

1113 let h = 2166136261;

1114 for (let i = 0; i < value.length; i++) {

1115 h ^= value.charCodeAt(i);

1116 h = Math.imul(h, 16777619);

1117 }

1118 return (h >>> 0).toString(16).padStart(8, "0");

1119}

1120function mask(secret, kind, keepTail = 0) {

1121 if (kind === "private_key") return "-----BEGIN PRIVATE KEY----- \u2022\u2022\u2022 [redacted]";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist-cli/index.jsView on unpkg · L1121

Critical

Secret Pattern

RSA private key in dist-cli/index.js

dist-cli/index.jsView on unpkg · L1121

1122 const tail = keepTail > 0 ? secret.slice(-keepTail) : "";

1123 const prefixMatch = secret.match(/^(sk-ant-|sk-|ghp_|gho_|ghu_|ghs_|ghr_|github_pat_|sbp_|sbs_|AKIA)/);

1124 const prefix = prefixMatch ? prefixMatch[0] : "";

1125 return `${prefix}${"\u2022".repeat(8)}${tail}`;

1126}

1127var counter = 0;

1128function rid() {

1129 counter = (counter + 1) % 1e6;

1130 return `red_${fingerprint(String(counter) + ":" + Date.now())}`;

1131}

1132function redactString(input, fieldPath = "$") {

1133 if (!input) return { text: input, redactions: [] };

1134 let text = input;

1135 const redactions = [];

1136 const apply = (re, kind, keepTail = 0, group) => {

1137 text = text.replace(re, (match, ...args) => {

1138 const secret = group != null ? args[group - 1] : match;

1139 if (!secret) return match;

1140 const replacement = mask(secret, kind, keepTail);

1141 redactions.push({