registry / @benree/agentcall / 0.1.0

@benree/agentcall@0.1.0

Call your friends' coding agents from your terminal (or let your agent do it).

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 50.3 KB of source, external domains: agentcall.benree.tech, www.apple.com

Source & flagged code

1 flagged

dist/launchd.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/launchd.jsView on unpkg · L1

3import { dirname } from "node:path";

4import { fileURLToPath } from "node:url";

5export const LAUNCH_LABEL = "tech.benree.agentcall.listener";

6const defaultExec = (cmd) => {

7 execFileSync(cmd[0], cmd.slice(1), { stdio: "ignore" });

8};

9function uid() {

10 return process.getuid?.() ?? 501;

11}

12// Base search path launchd falls back to. extraPathDirs (from setup's bin

13// detection) and the node binary's own dir are prepended ahead of these so

14// the listener can find an agent/node install that lives outside them (e.g.

15// ~/.local/bin, nvm/fnm shims).

16const BASE_PATH_DIRS = ["/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin"];

17export function plistContent(nodeBin, cliScript, p, extraPathDirs = []) {

18 const pathDirs = [...new Set([...extraPathDirs, dirname(nodeBin), ...BASE_PATH_DIRS])];

19 return `<?xml version="1.0" encoding="UTF-8"?>

20<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

21<plist version="1.0">

Source & flagged code

1 flagged · loading source

dist/launchd.jsView file

1import { execFileSync } from "node:child_process"; L2: import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs"; ... L47: try { L48: execCmd(["launchctl", "bootout", `gui/${uid()}/${LAUNCH_LABEL}`]); L49: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/launchd.jsView on unpkg · L1

Findings

3 Medium4 Low

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/launchd.js

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/launchd.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/launchd.jsView on unpkg · L1

3import { dirname } from "node:path";

4import { fileURLToPath } from "node:url";

5export const LAUNCH_LABEL = "tech.benree.agentcall.listener";

6const defaultExec = (cmd) => {

7 execFileSync(cmd[0], cmd.slice(1), { stdio: "ignore" });

8};

9function uid() {

10 return process.getuid?.() ?? 501;

11}

12// Base search path launchd falls back to. extraPathDirs (from setup's bin

13// detection) and the node binary's own dir are prepended ahead of these so

14// the listener can find an agent/node install that lives outside them (e.g.

15// ~/.local/bin, nvm/fnm shims).

16const BASE_PATH_DIRS = ["/opt/homebrew/bin", "/usr/local/bin", "/usr/bin", "/bin"];

17export function plistContent(nodeBin, cliScript, p, extraPathDirs = []) {

18 const pathDirs = [...new Set([...extraPathDirs, dirname(nodeBin), ...BASE_PATH_DIRS])];

19 return `<?xml version="1.0" encoding="UTF-8"?>

20<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

21<plist version="1.0">