registry / @bunny-agent/runner-cli / 0.9.47-release.1

@bunny-agent/runner-cli@0.9.47-release.1

BunnyAgent Runner CLI - Like gemini-cli or claude-code, runs in your local terminal with AI SDK UI streaming

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 245 KB of source, external domains: api.search.brave.com, api.tavily.com, platform.claude.com

Source & flagged code

3 flagged

dist/build-image.jsView file

Lines 1-21javascript

1import { execSync } from "node:child_process";

2import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync, } from "node:fs";

High

Child Process

Package source references child process execution.

dist/build-image.jsView on unpkg · L1

3import { basename, dirname, join, resolve } from "node:path";

4import { fileURLToPath } from "node:url";

5// ---------------------------------------------------------------------------

6// Helpers

7// ---------------------------------------------------------------------------

8function getPackageRoot() {

9 const thisDir = dirname(fileURLToPath(import.meta.url));

10 return resolve(thisDir, "..");

11}

12function getShippedDockerfile() {

13 // Look for Dockerfile in several locations:

14 // 1. Package root (apps/runner-cli/Dockerfile) — shipped with npm package

15 // 2. docker/bunny-agent-claude/Dockerfile — monorepo development

16 // 3. CWD-relative docker/bunny-agent-claude/Dockerfile — global install invoked from repo root

17 const packageRoot = getPackageRoot();

18 const candidates = [

19 join(packageRoot, "Dockerfile"),

20 resolve(packageRoot, "..", "..", "docker", "bunny-agent-claude", "Dockerfile"),

21 resolve(process.cwd(), "docker", "bunny-agent-claude", "Dockerfile"),

dist/bundle.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __defProp = Object.defineProperty;

3var __export = (target, all) => {

4 for (var name in all)

5 __defProp(target, name, { get: all[name], enumerable: true });

6};

Source & flagged code

3 flagged · loading source

dist/build-image.jsView file

1import { execSync } from "node:child_process"; L2: import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync, } from "node:fs";

High

Child Process

Package source references child process execution.

dist/build-image.jsView on unpkg · L1

dist/bundle.mjsView file

13// src/build-image.ts L14: import { execSync } from "node:child_process"; L15: import { ... L97: mkdirSync(buildContext, { recursive: true }); L98: let dockerfile = readFileSync(getShippedDockerfile(), "utf8"); L99: if (templatePath && templateName) { ... L648: return true; L649: if (process.env.LITELLM_MASTER_KEY) L650: return true;

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bundle.mjsView on unpkg · L13

574try { L575: const fs2 = await import("node:fs"); L576: const path2 = await import("node:path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle.mjsView on unpkg · L574

Findings

3 High4 Medium4 Low

HighChild Processdist/build-image.js

HighShell

HighRemote Agent Bridgedist/bundle.mjs

MediumDynamic Requiredist/bundle.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/build-image.jsView file

Lines 1-21javascript

1import { execSync } from "node:child_process";

2import { copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync, } from "node:fs";

High

Child Process

Package source references child process execution.

dist/build-image.jsView on unpkg · L1

3import { basename, dirname, join, resolve } from "node:path";

4import { fileURLToPath } from "node:url";

5// ---------------------------------------------------------------------------

6// Helpers

7// ---------------------------------------------------------------------------

8function getPackageRoot() {

9 const thisDir = dirname(fileURLToPath(import.meta.url));

10 return resolve(thisDir, "..");

11}

12function getShippedDockerfile() {

13 // Look for Dockerfile in several locations:

14 // 1. Package root (apps/runner-cli/Dockerfile) — shipped with npm package

15 // 2. docker/bunny-agent-claude/Dockerfile — monorepo development

16 // 3. CWD-relative docker/bunny-agent-claude/Dockerfile — global install invoked from repo root

17 const packageRoot = getPackageRoot();

18 const candidates = [

19 join(packageRoot, "Dockerfile"),

20 resolve(packageRoot, "..", "..", "docker", "bunny-agent-claude", "Dockerfile"),

21 resolve(process.cwd(), "docker", "bunny-agent-claude", "Dockerfile"),

dist/bundle.mjsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __defProp = Object.defineProperty;

3var __export = (target, all) => {

4 for (var name in all)

5 __defProp(target, name, { get: all[name], enumerable: true });

6};

Lines 554-594javascript

554

555`;

556 }

557 }

558};

559function streamSDKMessagesToAISDKUI(messageIterator) {

560 return new AISDKStreamConverter().stream(messageIterator);

561}

562

563// ../../packages/runner-claude/dist/claude-runner.js

564function createCanUseToolCallback(claudeOptions) {

565 return async (toolName, input, options) => {

566 const { toolUseID } = options;

567 if (claudeOptions.yolo && toolName !== "AskUserQuestion") {

568 return {

569 behavior: "allow",

570 updatedInput: input

571 };

572 }

573 const cwd = claudeOptions.cwd || process.cwd();

574 try {

575 const fs2 = await import("node:fs");

576 const path2 = await import("node:path");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/bundle.mjsView on unpkg · L574

577 const approvalDir = path2.join(cwd, ".bunny-agent", "approvals");

578 const approvalFile = path2.join(approvalDir, `${toolUseID}.json`);

579 fs2.mkdirSync(approvalDir, { recursive: true });

580 if (!fs2.existsSync(approvalFile)) {

581 fs2.writeFileSync(approvalFile, JSON.stringify({

582 status: "pending",

583 toolName,

584 input,

585 questions: toolName === "AskUserQuestion" ? input?.questions : void 0,

586 answers: {}

587 }));

588 }

589 const timeout = Date.now() + 6e4;

590 let lastApproval = null;

591 while (Date.now() < timeout) {

592 try {

593 const data = fs2.readFileSync(approvalFile, "utf-8");

594 const approval = JSON.parse(data);