registry / @asterworks/agent-console / 0.1.8

@asterworks/agent-console@0.1.8

Local-first AI coding agent safety, work audit, and outcome dashboard for Claude Code and Codex.

Static Scan Results

scanned 11h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 864 KB of source, external domains: api.example.com, fb.me, reactjs.org, www.apple.com, www.w3.org

Source & flagged code

5 flagged

dist-cli/index.jsView file

Lines 171-211javascript

171 }

172 function recomputeSession(sessionId) {

173 const agg = raw.prepare(

174 `select

175 (select count(distinct file_path) from file_changes where session_id = @sid) as files_changed,

176 (select count(*) from events where session_id = @sid and type = 'git_event') as commits,

177 (select count(*) from risk_findings where session_id = @sid) as risk_count,

178 (select min(timestamp) from events where session_id = @sid) as first_ts,

179 (select max(timestamp) from events where session_id = @sid) as last_ts`

180 ).get({ sid: sessionId });

181 const metricsRows = raw.prepare(`select metrics_json, type from events where session_id = @sid`).all({ sid: sessionId });

182 let tokens = 0;

183 let cost = 0;

184 let testsPassed = 0;

185 let testsFailed = 0;

186 let hasStop = false;

187 for (const row of metricsRows) {

188 if (row.type === "session_stop") hasStop = true;

189 let m = {};

190 if (row.metrics_json) {

191 try {

192 m = JSON.parse(row.metrics_json);

193 } catch {

194 m = {};

195 }

196 }

197 if (typeof m.totalTokens === "number") tokens += m.totalTokens;

198 if (typeof m.estimatedCostUsd === "number") cost += m.estimatedCostUsd;

199 if (row.type === "test_result") {

200 if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1;

201 else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L191

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L191

202 }

203 }

204 const sevRow = raw.prepare(`select severity from risk_findings where session_id = @sid`).all({ sid: sessionId });

205 let maxRank = -1;

206 for (const r of sevRow) maxRank = Math.max(maxRank, SEV_RANK[r.severity] ?? -1);

207 const maxSev = maxRank >= 0 ? RANK_SEV[maxRank] : null;

208 const hasFail = raw.prepare(`select count(*) as c from events where session_id = @sid and type = 'error'`).get({ sid: sessionId });

209 const status = hasFail.c > 0 ? "failed" : hasStop ? "completed" : "active";

210 raw.prepare(

211 `update sessions set

Lines 762-802javascript

762 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

763 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

764 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b

•matchType = previous_version_dangerous_delta matchedPackage = @asterworks/agent-console@0.1.7 matchedIdentity = npm:[redacted]:0.1.7 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-cli/index.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist-cli/index.jsView file

782patternName = private_key_rsa severity = critical line = 782 matchedText = if (kind...d]";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist-cli/index.jsView on unpkg · L782

782patternName = private_key_rsa severity = critical line = 782 matchedText = if (kind...d]";

Critical

Secret Pattern

RSA private key in dist-cli/index.js

dist-cli/index.jsView on unpkg · L782

191Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L191: try { L192: m = JSON.parse(row.metrics_json); L193: } catch { ... L199: if (row.type === "test_result") { L200: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L201: else testsPassed += 1; ... L417: "use strict"; L418: DEFAULT_CONFIG_DIR = join(homedir(), ".aster-agent-console"); L419: DEFAULT_DB_PATH = join(DEFAULT_CONFIG_DIR, "agent-console.db"); ... L574: }); L575: import { spawn } from "child_process"; L576: function openBrowser(url) {

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L191

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-cli/index.jsView on unpkg

191try { L192: m = JSON.parse(row.metrics_json); L193: } catch { ... L199: if (row.type === "test_result") { L200: if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1; L201: else testsPassed += 1; ... L417: "use strict"; L418: DEFAULT_CONFIG_DIR = join(homedir(), ".aster-agent-console"); L419: DEFAULT_DB_PATH = join(DEFAULT_CONFIG_DIR, "agent-console.db"); ... L574: }); L575: import { spawn } from "child_process"; L576: function openBrowser(url) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L191

Findings

2 Critical2 High5 Medium5 Low

CriticalCritical Secretdist-cli/index.js

CriticalSecret Patterndist-cli/index.js

HighEntrypoint Build Divergencedist-cli/index.js

HighPrevious Version Dangerous Deltadist-cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist-cli/index.js

MediumProtestware

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

5 flagged

dist-cli/index.jsView file

Lines 171-211javascript

171 }

172 function recomputeSession(sessionId) {

173 const agg = raw.prepare(

174 `select

175 (select count(distinct file_path) from file_changes where session_id = @sid) as files_changed,

176 (select count(*) from events where session_id = @sid and type = 'git_event') as commits,

177 (select count(*) from risk_findings where session_id = @sid) as risk_count,

178 (select min(timestamp) from events where session_id = @sid) as first_ts,

179 (select max(timestamp) from events where session_id = @sid) as last_ts`

180 ).get({ sid: sessionId });

181 const metricsRows = raw.prepare(`select metrics_json, type from events where session_id = @sid`).all({ sid: sessionId });

182 let tokens = 0;

183 let cost = 0;

184 let testsPassed = 0;

185 let testsFailed = 0;

186 let hasStop = false;

187 for (const row of metricsRows) {

188 if (row.type === "session_stop") hasStop = true;

189 let m = {};

190 if (row.metrics_json) {

191 try {

192 m = JSON.parse(row.metrics_json);

193 } catch {

194 m = {};

195 }

196 }

197 if (typeof m.totalTokens === "number") tokens += m.totalTokens;

198 if (typeof m.estimatedCostUsd === "number") cost += m.estimatedCostUsd;

199 if (row.type === "test_result") {

200 if (typeof m.exitCode === "number" && m.exitCode !== 0) testsFailed += 1;

201 else testsPassed += 1;

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

dist-cli/index.jsView on unpkg · L191

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist-cli/index.jsView on unpkg · L191

202 }

203 }

204 const sevRow = raw.prepare(`select severity from risk_findings where session_id = @sid`).all({ sid: sessionId });

205 let maxRank = -1;

206 for (const r of sevRow) maxRank = Math.max(maxRank, SEV_RANK[r.severity] ?? -1);

207 const maxSev = maxRank >= 0 ? RANK_SEV[maxRank] : null;

208 const hasFail = raw.prepare(`select count(*) as c from events where session_id = @sid and type = 'error'`).get({ sid: sessionId });

209 const status = hasFail.c > 0 ? "failed" : hasStop ? "completed" : "active";

210 raw.prepare(

211 `update sessions set

Lines 762-802javascript

762 // Generic OpenAI keys incl. newer sk-proj-/sk-svcacct- formats (allow - and _).

763 { kind: "api_key", re: /\bsk-[A-Za-z0-9][A-Za-z0-9_-]{18,}\b/g, keepTail: 4 },

764 { kind: "github_token", re: /\b(?:ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist-cli/index.jsView on unpkg