registry / @autonoma-ai/planner / 0.1.19

@autonoma-ai/planner@0.1.19

Autonoma test planner - generate E2E test cases for any frontend codebase.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 1 file(s), 302 KB of source, external domains: autonoma.app, docs.autonoma.app, us.i.posthog.com

Source & flagged code

4 flagged

dist/index.jsView file

Lines 445-490javascript

445function getProvider() {

446 if (provider != null) return provider;

447 const token = readEnv().AUTONOMA_API_TOKEN?.trim();

448 if (!token) {

449 throw new Error("Not authenticated - launch the planner from the Autonoma app, or set AUTONOMA_API_TOKEN.");

450 }

451 const apiUrl = (readEnv().AUTONOMA_API_URL ?? DEFAULT_API_URL).replace(/\/+$/, "");

452 provider = createOpenRouter({ apiKey: token, baseURL: `${apiUrl}/v1/llm-proxy` });

453 return provider;

454}

455function getModel(modelId) {

456 return getProvider().languageModel(modelId ?? readEnv().OPENROUTER_MODEL ?? DEFAULT_MODEL);

457}

458var DEFAULT_MODEL, AI_MAX_RETRIES, DEFAULT_API_URL, provider;

459var init_model = __esm({

460 "src/core/model.ts"() {

461 "use strict";

462 init_esm_shims();

463 init_env();

464 DEFAULT_MODEL = "google/gemini-3-flash-preview";

465 AI_MAX_RETRIES = 10;

466 DEFAULT_API_URL = "https://autonoma.app";

467 }

468});

469

470// src/core/notify.ts

471import { execFile as execFile2 } from "child_process";

472import { platform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L470

473function notify(title, message) {

474 process.stderr.write("\x07");

475 const os = platform();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L465

476 if (os === "darwin") {

477 execFile2(

478 "osascript",

479 ["-e", `display notification "${message.replace(/"/g, '\\"')}" with title "${title.replace(/"/g, '\\"')}"`],

480 () => {

481 }

482 );

483 } else if (os === "linux") {

484 execFile2("notify-send", [title, message], () => {

485 });

486 }

487}

488var init_notify = __esm({

489 "src/core/notify.ts"() {

490 "use strict";

Lines 2453-2493javascript

2453- Dependents (independently_created: false) with owner chains

2454- Dual-creation models (both true AND non-empty created_by)

2455- Dependency graph summary (which models must exist before others)

2456

2457### 2. factory-scaffold.ts

2458

2459A TypeScript file

Lines 4016-4056javascript

4016 inputSchema: z17.object({

4017 instructions: z17.string().describe("Complete, copy-pasteable implementation instructions")

4018 }),

4019 execute: async (input) => {

4020 result = input.instructions;

4021 return { done: true };

4022 }

Source & flagged code

4 flagged · loading source

dist/index.jsView file

470// src/core/notify.ts L471: import { execFile as execFile2 } from "child_process"; L472: import { platform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L470

465AI_MAX_RETRIES = 10; L466: DEFAULT_API_URL = "https://autonoma.app"; L467: } ... L470: // src/core/notify.ts L471: import { execFile as execFile2 } from "child_process"; L472: import { platform } from "os"; L473: function notify(title, message) { L474: process.stderr.write("\x07"); L475: const os = platform();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L465

4036patternName = generic_password severity = medium line = 4036 matchedText = - Email/... } }

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/index.jsView on unpkg · L4036

2473patternName = generic_password severity = medium line = 2473 matchedText = // Sugge...' })

Medium

Secret Pattern

Hardcoded password in dist/index.js

dist/index.jsView on unpkg · L2473

Findings

3 High5 Medium5 Low

HighChild Processdist/index.js

HighShell

HighCommand Output Exfiltrationdist/index.js

MediumSecret Patterndist/index.js

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumSecret Patterndist/index.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

dist/index.jsView file

Lines 445-490javascript

445function getProvider() {

446 if (provider != null) return provider;

447 const token = readEnv().AUTONOMA_API_TOKEN?.trim();

448 if (!token) {

449 throw new Error("Not authenticated - launch the planner from the Autonoma app, or set AUTONOMA_API_TOKEN.");

450 }

451 const apiUrl = (readEnv().AUTONOMA_API_URL ?? DEFAULT_API_URL).replace(/\/+$/, "");

452 provider = createOpenRouter({ apiKey: token, baseURL: `${apiUrl}/v1/llm-proxy` });

453 return provider;

454}

455function getModel(modelId) {

456 return getProvider().languageModel(modelId ?? readEnv().OPENROUTER_MODEL ?? DEFAULT_MODEL);

457}

458var DEFAULT_MODEL, AI_MAX_RETRIES, DEFAULT_API_URL, provider;

459var init_model = __esm({

460 "src/core/model.ts"() {

461 "use strict";

462 init_esm_shims();

463 init_env();

464 DEFAULT_MODEL = "google/gemini-3-flash-preview";

465 AI_MAX_RETRIES = 10;

466 DEFAULT_API_URL = "https://autonoma.app";

467 }

468});

469

470// src/core/notify.ts

471import { execFile as execFile2 } from "child_process";

472import { platform } from "os";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L470

473function notify(title, message) {

474 process.stderr.write("\x07");

475 const os = platform();

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L465

476 if (os === "darwin") {

477 execFile2(

478 "osascript",

479 ["-e", `display notification "${message.replace(/"/g, '\\"')}" with title "${title.replace(/"/g, '\\"')}"`],

480 () => {

481 }

482 );

483 } else if (os === "linux") {

484 execFile2("notify-send", [title, message], () => {

485 });

486 }

487}

488var init_notify = __esm({

489 "src/core/notify.ts"() {

490 "use strict";

Lines 2453-2493javascript

2453- Dependents (independently_created: false) with owner chains

2454- Dual-creation models (both true AND non-empty created_by)

2455- Dependency graph summary (which models must exist before others)

2456

2457### 2. factory-scaffold.ts

2458

2459A TypeScript file

Lines 4016-4056javascript

4016 inputSchema: z17.object({

4017 instructions: z17.string().describe("Complete, copy-pasteable implementation instructions")

4018 }),

4019 execute: async (input) => {

4020 result = input.instructions;

4021 return { done: true };

4022 }