registry / @bin.zhou/aegis / 0.2.13

@bin.zhou/aegis@0.2.13

Aegis - local-first, policy-gated CLI agent. All effects go through a Policy Gateway; changes happen in an isolated worktree; every action is auditable.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 70 file(s), 333 KB of source, external domains: api.anthropic.com, api.deepseek.com, api.openai.com, generativelanguage.googleapis.com

Source & flagged code

5 flagged

dist/policy/canary-scanner.jsView file

Lines 11-51javascript

11 * This is the reusable gate behind the one-off canary assertions; the release

12 * gate (§6.1) requires a secret scan with zero unexempted hits.

13 */

14export class CanaryScanner {

15 hash;

16 canaries = [];

17 constructor(hash) {

18 this.hash = hash;

19 }

20 /** Register a canary secret; returns the canary value to sprinkle into inputs. */

21 register(label, value) {

22 this.canaries.push({ label, value });

23 return value;

24 }

25 /** Quick synthetic canaries for tests that don't need specific shapes. */

26 registerDefaults() {

27 return [

28 this.register("openai", "sk-canary-" + "a".repeat(40)),

29 this.register("anthropic", "sk-ant-canary-" + "b".repeat(40)),

30 this.register("github", "ghp_canary" + "c".repeat(36)),

31 this.register("pem", `-----BEGIN RSA PRIVATE KEY-----\nCANARY${"d".repeat(40)}\n-----END RSA PRIVATE KEY-----`),

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/policy/canary-scanner.jsView on unpkg · L31

Critical

Secret Pattern

RSA private key in dist/policy/canary-scanner.js

dist/policy/canary-scanner.jsView on unpkg · L31

32 ];

33 }

34 /** Assert no canary appears in a single string. */

35 assertNoneIn(label, text) {

36 for (const c of this.canaries) {

37 if (text.includes(c.value)) {

38 throw new AppError({

39 code: ErrorCode.SECRET_EXPOSURE_SUSPECTED,

40 message: `canary "${c.label}" survived in ${label}`,

41 retryable: false,

42 });

43 }

44 }

45 }

46 /** Sweep a directory tree (text files only). */

47 sweepDir(label, root) {

48 const out = [];

49 if (!existsSync(root))

50 return out;

51 this.walk(root, (path) => {

dist/cli/setup.jsView file

Lines 1-23javascript

1import { createInterface } from "node:readline";

2import { writeFileSync, existsSync, mkdirSync, chmodSync } from "node:fs";

3import { join } from "node:path";

4import { execFileSync } from "node:child_process";

5import { globalHome, loadMergedConfig } from "./context.js";

Source & flagged code

5 flagged · loading source

dist/policy/canary-scanner.jsView file

31patternName = private_key_rsa severity = critical line = 31 matchedText = this.reg...-`),

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/policy/canary-scanner.jsView on unpkg · L31

31patternName = private_key_rsa severity = critical line = 31 matchedText = this.reg...-`),

Critical

Secret Pattern

RSA private key in dist/policy/canary-scanner.js

dist/policy/canary-scanner.jsView on unpkg · L31

dist/cli/setup.jsView file

3import { join } from "node:path"; L4: import { execFileSync } from "node:child_process"; L5: import { globalHome, loadMergedConfig } from "./context.js"; ... L8: { kind: "openai-compatible", label: "OpenAI-compatible (DeepSeek, Qwen, Kimi, ollama, vLLM, any /v1/chat/completions endpoint)" }, L9: { kind: "anthropic", label: "Anthropic-compatible (Claude official, MiniMax /anthropic, any /v1/messages endpoint)", defaultUrl: "https://api.anthropic.com" }, L10: { kind: "gemini", label: "Google Gemini", defaultUrl: "https://generativelanguage.googleapis.com" }, ... L20: return (q) => new Promise((resolve) => { L21: process.stdout.write(q); L22: if (lines.length) ... L28: function keychainAvailable() { L29: if (process.platform === "darwin") L30: return hasBin("security");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli/setup.jsView on unpkg · L3

•matchType = previous_version_dangerous_delta matchedPackage = @bin.zhou/aegis@0.2.9 matchedIdentity = npm:QGJpbi56aG91L2FlZ2lz:0.2.9 similarity = 0.962 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli/setup.jsView on unpkg

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/setup.jsView on unpkg · L3

Findings

2 Critical2 High4 Medium6 Low

CriticalCritical Secretdist/policy/canary-scanner.js

CriticalSecret Patterndist/policy/canary-scanner.js

HighSandbox Evasion Gated Capabilitydist/cli/setup.js

HighPrevious Version Dangerous Deltadist/cli/setup.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli/setup.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/policy/canary-scanner.jsView file

Lines 11-51javascript

11 * This is the reusable gate behind the one-off canary assertions; the release

12 * gate (§6.1) requires a secret scan with zero unexempted hits.

13 */

14export class CanaryScanner {

15 hash;

16 canaries = [];

17 constructor(hash) {

18 this.hash = hash;

19 }

20 /** Register a canary secret; returns the canary value to sprinkle into inputs. */

21 register(label, value) {

22 this.canaries.push({ label, value });

23 return value;

24 }

25 /** Quick synthetic canaries for tests that don't need specific shapes. */

26 registerDefaults() {

27 return [

28 this.register("openai", "sk-canary-" + "a".repeat(40)),

29 this.register("anthropic", "sk-ant-canary-" + "b".repeat(40)),

30 this.register("github", "ghp_canary" + "c".repeat(36)),

31 this.register("pem", `-----BEGIN RSA PRIVATE KEY-----\nCANARY${"d".repeat(40)}\n-----END RSA PRIVATE KEY-----`),

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/policy/canary-scanner.jsView on unpkg · L31

Critical

Secret Pattern

RSA private key in dist/policy/canary-scanner.js

dist/policy/canary-scanner.jsView on unpkg · L31

32 ];

33 }

34 /** Assert no canary appears in a single string. */

35 assertNoneIn(label, text) {

36 for (const c of this.canaries) {

37 if (text.includes(c.value)) {

38 throw new AppError({

39 code: ErrorCode.SECRET_EXPOSURE_SUSPECTED,

40 message: `canary "${c.label}" survived in ${label}`,

41 retryable: false,

42 });

43 }

44 }

45 }

46 /** Sweep a directory tree (text files only). */

47 sweepDir(label, root) {

48 const out = [];

49 if (!existsSync(root))

50 return out;

51 this.walk(root, (path) => {

dist/cli/setup.jsView file

Lines 1-23javascript

1import { createInterface } from "node:readline";

2import { writeFileSync, existsSync, mkdirSync, chmodSync } from "node:fs";

3import { join } from "node:path";

4import { execFileSync } from "node:child_process";

5import { globalHome, loadMergedConfig } from "./context.js";