registry / @autonoma-ai/planner / 0.1.18

@autonoma-ai/planner@0.1.18

Autonoma test planner - generate E2E test cases for any frontend codebase.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 1 file(s), 301 KB of source, external domains: autonoma.app, docs.autonoma.app, us.i.posthog.com

Source & flagged code

4 flagged

dist/index.jsView file

Lines 422-467javascript

422function getProvider() {

423 if (provider != null) return provider;

424 const token = readEnv().AUTONOMA_API_TOKEN?.trim();

425 if (!token) {

426 throw new Error("Not authenticated - launch the planner from the Autonoma app, or set AUTONOMA_API_TOKEN.");

427 }

428 const apiUrl = (readEnv().AUTONOMA_API_URL ?? DEFAULT_API_URL).replace(/\/+$/, "");

429 provider = createOpenRouter({ apiKey: token, baseURL: `${apiUrl}/v1/llm-proxy` });

430 return provider;

431}

432function getModel(modelId) {

433 return getProvider().languageModel(modelId ?? readEnv().OPENROUTER_MODEL ?? DEFAULT_MODEL);

434}

435var DEFAULT_MODEL, AI_MAX_RETRIES, DEFAULT_API_URL, provider;

436var init_model = __esm({

437 "src/core/model.ts"() {

438 "use strict";

439 init_esm_shims();

440 init_env();

441 DEFAULT_MODEL = "google/gemini-3-flash-preview";

442 AI_MAX_RETRIES = 10;

443 DEFAULT_API_URL = "https://autonoma.app";

444 }

445});

446

447// src/core/notify.ts

448import { execFile as execFile2 } from "child_process";

449import { platform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L447

450function notify(title, message) {

451 process.stderr.write("\x07");

452 const os = platform();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L442

453 if (os === "darwin") {

454 execFile2(

455 "osascript",

456 ["-e", `display notification "${message.replace(/"/g, '\\"')}" with title "${title.replace(/"/g, '\\"')}"`],

457 () => {

458 }

459 );

460 } else if (os === "linux") {

461 execFile2("notify-send", [title, message], () => {

462 });

463 }

464}

465var init_notify = __esm({

466 "src/core/notify.ts"() {

467 "use strict";

Lines 2436-2476javascript

2436- Dependents (independently_created: false) with owner chains

2437- Dual-creation models (both true AND non-empty created_by)

2438- Dependency graph summary (which models must exist before others)

2439

2440### 2. factory-scaffold.ts

2441

2442A TypeScript file

Lines 3999-4039javascript

3999 inputSchema: z17.object({

4000 instructions: z17.string().describe("Complete, copy-pasteable implementation instructions")

4001 }),

4002 execute: async (input) => {

4003 result = input.instructions;

4004 return { done: true };

4005 }

Source & flagged code

4 flagged · loading source

dist/index.jsView file

447// src/core/notify.ts L448: import { execFile as execFile2 } from "child_process"; L449: import { platform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L447

442AI_MAX_RETRIES = 10; L443: DEFAULT_API_URL = "https://autonoma.app"; L444: } ... L447: // src/core/notify.ts L448: import { execFile as execFile2 } from "child_process"; L449: import { platform } from "os"; L450: function notify(title, message) { L451: process.stderr.write("\x07"); L452: const os = platform();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L442

4019patternName = generic_password severity = medium line = 4019 matchedText = - Email/... } }

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L4019

2456patternName = generic_password severity = medium line = 2456 matchedText = // Sugge...' })

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L2456

Findings

3 High5 Medium5 Low

HighChild Processdist/index.js

HighShell

HighCommand Output Exfiltrationdist/index.js

MediumSecret Patterndist/index.js

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/index.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

dist/index.jsView file

Lines 422-467javascript

422function getProvider() {

423 if (provider != null) return provider;

424 const token = readEnv().AUTONOMA_API_TOKEN?.trim();

425 if (!token) {

426 throw new Error("Not authenticated - launch the planner from the Autonoma app, or set AUTONOMA_API_TOKEN.");

427 }

428 const apiUrl = (readEnv().AUTONOMA_API_URL ?? DEFAULT_API_URL).replace(/\/+$/, "");

429 provider = createOpenRouter({ apiKey: token, baseURL: `${apiUrl}/v1/llm-proxy` });

430 return provider;

431}

432function getModel(modelId) {

433 return getProvider().languageModel(modelId ?? readEnv().OPENROUTER_MODEL ?? DEFAULT_MODEL);

434}

435var DEFAULT_MODEL, AI_MAX_RETRIES, DEFAULT_API_URL, provider;

436var init_model = __esm({

437 "src/core/model.ts"() {

438 "use strict";

439 init_esm_shims();

440 init_env();

441 DEFAULT_MODEL = "google/gemini-3-flash-preview";

442 AI_MAX_RETRIES = 10;

443 DEFAULT_API_URL = "https://autonoma.app";

444 }

445});

446

447// src/core/notify.ts

448import { execFile as execFile2 } from "child_process";

449import { platform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L447

450function notify(title, message) {

451 process.stderr.write("\x07");

452 const os = platform();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L442

453 if (os === "darwin") {

454 execFile2(

455 "osascript",

456 ["-e", `display notification "${message.replace(/"/g, '\\"')}" with title "${title.replace(/"/g, '\\"')}"`],

457 () => {

458 }

459 );

460 } else if (os === "linux") {

461 execFile2("notify-send", [title, message], () => {

462 });

463 }

464}

465var init_notify = __esm({

466 "src/core/notify.ts"() {

467 "use strict";

Lines 2436-2476javascript

2436- Dependents (independently_created: false) with owner chains

2437- Dual-creation models (both true AND non-empty created_by)

2438- Dependency graph summary (which models must exist before others)

2439

2440### 2. factory-scaffold.ts

2441

2442A TypeScript file

Lines 3999-4039javascript

3999 inputSchema: z17.object({

4000 instructions: z17.string().describe("Complete, copy-pasteable implementation instructions")

4001 }),

4002 execute: async (input) => {

4003 result = input.instructions;

4004 return { done: true };

4005 }