registry / @asterworks/agent-console / 0.1.11

@asterworks/agent-console@0.1.11

Local-first AI coding agent safety, work audit, and outcome dashboard for Claude Code and Codex.

Static Scan Results

scanned 9h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 912 KB of source, external domains: api.example.com, fb.me, reactjs.org, www.apple.com, www.w3.org

Source & flagged code

5 flagged

dist-cli/index.jsView file

Lines 212-252javascript

212 }

213 function recomputeSession(sessionId) {

214 const agg = raw.prepare(

215 `select

216 (select count(distinct file_path) from file_changes where session_id = @sid) as files_changed,

217 (select count(*) from events where session_id = @sid and type = 'git_event') as commits,

218 (select count(*) from risk_findings where session_id = @sid) as risk_count,

219 (select min(timestamp) from events where session_id = @sid) as first_ts,

220 (select max(timestamp) from events where session_id = @sid) as last_ts`

221 ).get({ sid: sessionId });

222 const metricsRows = raw.prepare(`select metrics_json, type from events where session_id = @sid`).all({ sid: sessionId });

223 let tokens = 0;

224 let cost = 0;

225 let testsPassed = 0;

226 let testsFailed = 0;

227 let hasStop = false;

228 for (const row of metricsRows) {

229 if (row.type === "session_stop") hasStop = true;

230 let m = {};

231 if (row.metrics_json) {

232 try {

233 m = JSON.parse(row.metrics_json);

234 } catch {

235 m = {};

236 }

237 }

238 if (typeof m.totalTokens === "number") tokens += m.totalTokens;

239 if (typeof m.estimatedCostUsd === "number") cost += m.estimatedCostUsd;

240 if (row.type === "test_result") {

241 if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1;

242 else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L232

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L232

243 }

244 }

245 const sevRow = raw.prepare(`select severity from risk_findings where session_id = @sid`).all({ sid: sessionId });

246 let maxRank = -1;

247 for (const r of sevRow) maxRank = Math.max(maxRank, SEV_RANK[r.severity] ?? -1);

248 const maxSev = maxRank >= 0 ? RANK_SEV[maxRank] : null;

249 const hasFail = raw.prepare(`select count(*) as c from events where session_id = @sid and type = 'error'`).get({ sid: sessionId });

250 const status = hasFail.c > 0 ? "failed" : hasStop ? "completed" : "active";

251 raw.prepare(

252 `update sessions set

Lines 814-854javascript

814 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

815 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

816 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b

•matchType = previous_version_dangerous_delta matchedPackage = @asterworks/agent-console@0.1.10 matchedIdentity = npm:[redacted]:0.1.10 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-cli/index.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist-cli/index.jsView file

834patternName = private_key_rsa severity = critical line = 834 matchedText = if (kind...d]";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist-cli/index.jsView on unpkg · L834

834patternName = private_key_rsa severity = critical line = 834 matchedText = if (kind...d]";

Critical

Secret Pattern

RSA private key in dist-cli/index.js

dist-cli/index.jsView on unpkg · L834

232Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L232: try { L233: m = JSON.parse(row.metrics_json); L234: } catch { ... L240: if (row.type === "test_result") { L241: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L242: else testsPassed += 1; ... L465: "use strict"; L466: DEFAULT_CONFIG_DIR = join(homedir(), ".aster-agent-console"); L467: DEFAULT_DB_PATH = join(DEFAULT_CONFIG_DIR, "agent-console.db"); ... L626: }); L627: import { spawn } from "child_process"; L628: function openBrowser(url) {

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L232

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-cli/index.jsView on unpkg

232try { L233: m = JSON.parse(row.metrics_json); L234: } catch { ... L240: if (row.type === "test_result") { L241: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L242: else testsPassed += 1; ... L465: "use strict"; L466: DEFAULT_CONFIG_DIR = join(homedir(), ".aster-agent-console"); L467: DEFAULT_DB_PATH = join(DEFAULT_CONFIG_DIR, "agent-console.db"); ... L626: }); L627: import { spawn } from "child_process"; L628: function openBrowser(url) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L232

Findings

2 Critical2 High5 Medium5 Low

CriticalCritical Secretdist-cli/index.js

CriticalSecret Patterndist-cli/index.js

HighEntrypoint Build Divergencedist-cli/index.js

HighPrevious Version Dangerous Deltadist-cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist-cli/index.js

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

5 flagged

dist-cli/index.jsView file

Lines 212-252javascript

212 }

213 function recomputeSession(sessionId) {

214 const agg = raw.prepare(

215 `select

216 (select count(distinct file_path) from file_changes where session_id = @sid) as files_changed,

217 (select count(*) from events where session_id = @sid and type = 'git_event') as commits,

218 (select count(*) from risk_findings where session_id = @sid) as risk_count,

219 (select min(timestamp) from events where session_id = @sid) as first_ts,

220 (select max(timestamp) from events where session_id = @sid) as last_ts`

221 ).get({ sid: sessionId });

222 const metricsRows = raw.prepare(`select metrics_json, type from events where session_id = @sid`).all({ sid: sessionId });

223 let tokens = 0;

224 let cost = 0;

225 let testsPassed = 0;

226 let testsFailed = 0;

227 let hasStop = false;

228 for (const row of metricsRows) {

229 if (row.type === "session_stop") hasStop = true;

230 let m = {};

231 if (row.metrics_json) {

232 try {

233 m = JSON.parse(row.metrics_json);

234 } catch {

235 m = {};

236 }

237 }

238 if (typeof m.totalTokens === "number") tokens += m.totalTokens;

239 if (typeof m.estimatedCostUsd === "number") cost += m.estimatedCostUsd;

240 if (row.type === "test_result") {

241 if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1;

242 else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L232

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L232

243 }

244 }

245 const sevRow = raw.prepare(`select severity from risk_findings where session_id = @sid`).all({ sid: sessionId });

246 let maxRank = -1;

247 for (const r of sevRow) maxRank = Math.max(maxRank, SEV_RANK[r.severity] ?? -1);

248 const maxSev = maxRank >= 0 ? RANK_SEV[maxRank] : null;

249 const hasFail = raw.prepare(`select count(*) as c from events where session_id = @sid and type = 'error'`).get({ sid: sessionId });

250 const status = hasFail.c > 0 ? "failed" : hasStop ? "completed" : "active";

251 raw.prepare(

252 `update sessions set

Lines 814-854javascript

814 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

815 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

816 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-cli/index.jsView on unpkg