registry / @asterworks/agent-console / 0.1.13

@asterworks/agent-console@0.1.13

Local-first AI coding agent safety, work audit, and outcome dashboard for Claude Code and Codex.

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 913 KB of source, external domains: 21st.dev, api.example.com, api.slack.com, console.anthropic.com, console.aws.amazon.com, console.cloud.google.com, console.neon.tech, dashboard.stripe.com, fb.me, github.com, higgsfield.ai, platform.openai.com, reactjs.org, supabase.com, www.apple.com, www.w3.org

Source & flagged code

4 flagged

dist-cli/index.jsView file

Lines 194-234javascript

194 }

195 function recomputeSession(sessionId) {

196 const agg = raw.prepare(

197 `select

198 (select count(distinct file_path) from file_changes where session_id = @sid) as files_changed,

199 (select count(*) from events where session_id = @sid and type = 'git_event') as commits,

200 (select count(*) from risk_findings where session_id = @sid) as risk_count,

201 (select min(timestamp) from events where session_id = @sid) as first_ts,

202 (select max(timestamp) from events where session_id = @sid) as last_ts`

203 ).get({ sid: sessionId });

204 const metricsRows = raw.prepare(`select metrics_json, type from events where session_id = @sid`).all({ sid: sessionId });

205 let tokens = 0;

206 let cost = 0;

207 let testsPassed = 0;

208 let testsFailed = 0;

209 let hasStop = false;

210 for (const row of metricsRows) {

211 if (row.type === "session_stop") hasStop = true;

212 let m = {};

213 if (row.metrics_json) {

214 try {

215 m = JSON.parse(row.metrics_json);

216 } catch {

217 m = {};

218 }

219 }

220 if (typeof m.totalTokens === "number") tokens += m.totalTokens;

221 if (typeof m.estimatedCostUsd === "number") cost += m.estimatedCostUsd;

222 if (row.type === "test_result") {

223 if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1;

224 else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L214

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L214

225 }

226 }

227 const sevRow = raw.prepare(`select severity from risk_findings where session_id = @sid`).all({ sid: sessionId });

228 let maxRank = -1;

229 for (const r of sevRow) maxRank = Math.max(maxRank, SEV_RANK[r.severity] ?? -1);

230 const maxSev = maxRank >= 0 ? RANK_SEV[maxRank] : null;

231 const hasFail = raw.prepare(`select count(*) as c from events where session_id = @sid and type = 'error'`).get({ sid: sessionId });

232 const status = hasFail.c > 0 ? "failed" : hasStop ? "completed" : "active";

233 raw.prepare(

234 `update sessions set

Lines 794-834javascript

794 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

795 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

796 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b

Source & flagged code

4 flagged · loading source

dist-cli/index.jsView file

814patternName = private_key_rsa severity = critical line = 814 matchedText = if (kind...d]";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist-cli/index.jsView on unpkg · L814

814patternName = private_key_rsa severity = critical line = 814 matchedText = if (kind...d]";

Critical

Secret Pattern

RSA private key in dist-cli/index.js

dist-cli/index.jsView on unpkg · L814

214Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L214: try { L215: m = JSON.parse(row.metrics_json); L216: } catch { ... L222: if (row.type === "test_result") { L223: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L224: else testsPassed += 1; ... L445: "use strict"; L446: DEFAULT_CONFIG_DIR = join(homedir(), ".aster-agent-console"); L447: DEFAULT_DB_PATH = join(DEFAULT_CONFIG_DIR, "agent-console.db"); ... L606: }); L607: import { spawn } from "child_process"; L608: function openBrowser(url) {

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L214

214try { L215: m = JSON.parse(row.metrics_json); L216: } catch { ... L222: if (row.type === "test_result") { L223: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L224: else testsPassed += 1; ... L445: "use strict"; L446: DEFAULT_CONFIG_DIR = join(homedir(), ".aster-agent-console"); L447: DEFAULT_DB_PATH = join(DEFAULT_CONFIG_DIR, "agent-console.db"); ... L606: }); L607: import { spawn } from "child_process"; L608: function openBrowser(url) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L214

Findings

2 Critical1 High5 Medium5 Low

CriticalCritical Secretdist-cli/index.js

CriticalSecret Patterndist-cli/index.js

HighEntrypoint Build Divergencedist-cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist-cli/index.js

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

4 flagged

dist-cli/index.jsView file

Lines 194-234javascript

194 }

195 function recomputeSession(sessionId) {

196 const agg = raw.prepare(

197 `select

198 (select count(distinct file_path) from file_changes where session_id = @sid) as files_changed,

199 (select count(*) from events where session_id = @sid and type = 'git_event') as commits,

200 (select count(*) from risk_findings where session_id = @sid) as risk_count,

201 (select min(timestamp) from events where session_id = @sid) as first_ts,

202 (select max(timestamp) from events where session_id = @sid) as last_ts`

203 ).get({ sid: sessionId });

204 const metricsRows = raw.prepare(`select metrics_json, type from events where session_id = @sid`).all({ sid: sessionId });

205 let tokens = 0;

206 let cost = 0;

207 let testsPassed = 0;

208 let testsFailed = 0;

209 let hasStop = false;

210 for (const row of metricsRows) {

211 if (row.type === "session_stop") hasStop = true;

212 let m = {};

213 if (row.metrics_json) {

214 try {

215 m = JSON.parse(row.metrics_json);

216 } catch {

217 m = {};

218 }

219 }

220 if (typeof m.totalTokens === "number") tokens += m.totalTokens;

221 if (typeof m.estimatedCostUsd === "number") cost += m.estimatedCostUsd;

222 if (row.type === "test_result") {

223 if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1;

224 else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L214

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L214

225 }

226 }

227 const sevRow = raw.prepare(`select severity from risk_findings where session_id = @sid`).all({ sid: sessionId });

228 let maxRank = -1;

229 for (const r of sevRow) maxRank = Math.max(maxRank, SEV_RANK[r.severity] ?? -1);

230 const maxSev = maxRank >= 0 ? RANK_SEV[maxRank] : null;

231 const hasFail = raw.prepare(`select count(*) as c from events where session_id = @sid and type = 'error'`).get({ sid: sessionId });

232 const status = hasFail.c > 0 ? "failed" : hasStop ? "completed" : "active";

233 raw.prepare(

234 `update sessions set

Lines 794-834javascript

794 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

795 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

796 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b