registry / @clawpump/claw-agent / 0.1.16

@clawpump/claw-agent@0.1.16

Install and run your own ClawPump Hermes agent — Solana AI agents, trading, Phoenix perps, DCA, lending, token launch & DeFi. Built on Hermes (Nous Research, MIT).

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 931 file(s), 7.68 MB of source, external domains: 127.0.0.1, agent.log, agents.clawpump.tech, ai.azure.com, aistudio.google.com, api.hindsight.vectorize.io, astral.sh, bit.ly, build.nvidia.com, cdn.example, chat.arcee.ai, coder.example.com, console.anthropic.com, console.x.ai, docs.aws.amazon.com, example.com, example.test, expedia.com, fonts.googleapis.com, gateway.example.com, getyourguide.com, git-scm.com, github.com, gw.example.com, hermes-agent.nousresearch.com, hermes-roy.tail.ts.net, hermes.local, host.example, huggingface.co, lmstudio.ai, marketplace.visualstudio.com, matrix.org, mattermost.example.com, modelstudio.console.alibabacloud.com, nousresearch.com, ollama.com, opencode.ai, openrouter.ai, paste.rs, platform.deepseek.com, platform.moonshot.cn, platform.openai.com, platform.stepfun.com, platform.xiaomimimo.com, portal.example, portal.nousresearch.com, raw.githubusercontent.com, solscan.io, text.example.com, vps.example.com

Source & flagged code

11 flagged

agent/agent/redact.pyView file

Lines 115-155python

115

116# JSON field patterns: "apiKey": "value", "token": "value", etc.

118_JSON_FIELD_RE = re.compile(

119 rf'("{_JSON_KEY_NAMES}")\s*:\s*"([^"]+)"',

120 re.IGNORECASE,

121)

122

123# Authorization headers

124_AUTH_HEADER_RE = re.compile(

125 r"(Authorization:\s*Bearer\s+)(\S+)",

126 re.IGNORECASE,

127)

128

129# Telegram bot tokens: bot<digits>:<token> or <digits>:<token>,

130# where token part is restricted to [-A-Za-z0-9_] and length >= 30

131_TELEGRAM_RE = re.compile(

132 r"(bot)?(\d{8,}):([-A-Za-z0-9_]{30,})",

133)

134

135# Private key blocks: -----BEGIN RSA PRIVATE KEY----- ... -----END RSA PRIVATE KEY-----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

agent/agent/redact.pyView on unpkg · L135

Critical

Secret Pattern

RSA private key in agent/agent/redact.py

agent/agent/redact.pyView on unpkg · L135

136_PRIVATE_KEY_RE = re.compile(

137 r"-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z ]*PRIVATE KEY-----"

138)

139

140# Database connection strings: protocol://user:PASSWORD@host

141# Catches postgres, mysql, mongodb, redis, amqp URLs and redacts the password

142_DB_CONNSTR_RE = re.compile(

143 r"((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp)://[^:]+:)([^@]+)(@)",

144 re.IGNORECASE,

145)

146

147# JWT tokens: header.payload[.signature] — always start with "eyJ" (base64 for "{")

148# Matches 1-part (header only), 2-part (header.payload), and full 3-part JWTs.

149_JWT_RE = re.compile(

150 r"eyJ[A-Za-z0-9_-]{10,}" # Header (always starts with eyJ)

151 r"(?:\.[A-Za-z0-9_=-]{4,}){0,2}" # Optional payload and/or signature

152)

153

154# E.164 phone numbers: +<country><number>, 7-15 digits

155# Negative lookahead prevents matching hex strings or identifiers

bin/cli.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// claw-agent — one-command installer for your ClawPump Hermes agent.

3//

4// npx @clawpump/claw-agent

5//

6// Bundles the agent (this npm package contains it), installs uv + Python 3.11,

7// builds an isolated venv, installs the agent, and drops a `claw` launcher on

8// your PATH. Then: `claw clawpump setup` (browser login) → all tools.

9//

10// Built on Hermes Agent by Nous Research (MIT).

12import { execSync, spawnSync }

agent/apps/desktop/scripts/measure-synthetic-stream.mjsView file

Lines 44-84javascript

44 ws.addEventListener('error', (e) => j(e), { once: true })

45 })

46 const cdp = new CDP(ws)

47 ws.addEventListener('message', (ev)

agent/ui-tui/packages/hermes-ink/src/utils/semver.tsView file

Lines 1-21typescript

1let _npmSemver: typeof import('semver') | undefined

Medium

Dynamic Require

Package source references dynamic require/import behavior.

agent/ui-tui/packages/hermes-ink/src/utils/semver.tsView on unpkg · L1

3function getNpmSemver(): typeof import('semver') {

agent/ui-tui/src/gatewayClient.tsView file

Lines 314-354typescript

314 this.publish(ev)

315 }

316

317 private handleWebSocketFrame(raw: unknown) {

318 const text = asWireText(raw)

319

320 if (!text) {

321

agent/batch_runner.pyView file

•path = agent/batch_runner.py kind = build_helper sizeBytes = 57245 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

agent/batch_runner.pyView on unpkg

agent/web/public/favicon.icoView file

•path = agent/web/public/favicon.ico kind = high_entropy_blob sizeBytes = 8482 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

agent/web/public/favicon.icoView on unpkg

agent/plugins/hermes-achievements/tests/test_achievement_engine.pyView file

•path = agent/plugins/hermes-achievements/tests/test_achievement_engine.py kind = payload_in_excluded_dir sizeBytes = 6798 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

agent/plugins/hermes-achievements/tests/test_achievement_engine.pyView on unpkg

agent/tools/terminal_tool.pyView file

Lines 773-813python

773 should prepend sudo_stdin to their stdin_data and pass the merged bytes to

774 Popen's stdin pipe.

775

776 Callers that cannot pipe subprocess stdin (modal, daytona) must embed

777 the password in the command string themselves; see their execute()

778 methods for how they handle the non-None sudo_stdin case.

779

780 If SUDO_PASSWORD is not set and an interactive UI is available

781 (HERMES_INTERACTIVE=1 or a registered sudo password callback):

782 Prompts user for password with 45s timeout, caches for session.

783

784

Source & flagged code

11 flagged · loading source

agent/agent/redact.pyView file

135patternName = private_key_rsa severity = critical line = 135 matchedText = # Privat...----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

agent/agent/redact.pyView on unpkg · L135

135patternName = private_key_rsa severity = critical line = 135 matchedText = # Privat...----

Critical

Secret Pattern

RSA private key in agent/agent/redact.py

agent/agent/redact.pyView on unpkg · L135

bin/cli.mjsView file

11L12: import { execSync, spawnSync } from "node:child_process"; L13: import fs from "node:fs";

High

Child Process

Package source references child process execution.

bin/cli.mjsView on unpkg · L11

75if (isWin) { L76: run("powershell", ["-ExecutionPolicy", "Bypass", "-NoProfile", "-Command", L77: "irm https://astral.sh/uv/install.ps1 | iex"]);

High

Shell

Package source references shell execution.

bin/cli.mjsView on unpkg · L75

agent/apps/desktop/scripts/measure-synthetic-stream.mjsView file

64} L65: async eval(expr) { L66: const r = await this.send('Runtime.evaluate', { expression: expr, returnByValue: true, awaitPromise: true })

Low

Eval

Package source references a known benign dynamic code generation pattern.

agent/apps/desktop/scripts/measure-synthetic-stream.mjsView on unpkg · L64

agent/ui-tui/packages/hermes-ink/src/utils/semver.tsView file

1let _npmSemver: typeof import('semver') | undefined L2:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

agent/ui-tui/packages/hermes-ink/src/utils/semver.tsView on unpkg · L1

agent/ui-tui/src/gatewayClient.tsView file

334L335: this.pushLog(`[protocol] malformed websocket frame: ${preview}`) L336: this.publish({ type: 'gateway.protocol_error', payload: { preview } }) ... L341: const python = resolvePython(root) L342: const cwd = process.env.HERMES_CWD || root L343: const env = { ...process.env } ... L347: this.startReadyTimer(python, cwd) L348: this.proc = spawn(python, ['-m', 'tui_gateway.entry'], { cwd, env, stdio: ['pipe', 'pipe', 'pipe'] }) L349: this.lifecycle(`[lifecycle] spawned gateway child ${describeChild(this.proc)} python=${python} cwd=${cwd}`)

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

agent/ui-tui/src/gatewayClient.tsView on unpkg · L334

agent/batch_runner.pyView file

•path = agent/batch_runner.py kind = build_helper sizeBytes = 57245 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

agent/batch_runner.pyView on unpkg

agent/web/public/favicon.icoView file

•path = agent/web/public/favicon.ico kind = high_entropy_blob sizeBytes = 8482 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

agent/web/public/favicon.icoView on unpkg

agent/plugins/hermes-achievements/tests/test_achievement_engine.pyView file

•path = agent/plugins/hermes-achievements/tests/test_achievement_engine.py kind = payload_in_excluded_dir sizeBytes = 6798 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

agent/plugins/hermes-achievements/tests/test_achievement_engine.pyView on unpkg

agent/tools/terminal_tool.pyView file

793patternName = generic_password severity = medium line = 793 matchedText = has_conf...iron

Medium

Secret Pattern

Hardcoded password in agent/tools/terminal_tool.py

agent/tools/terminal_tool.pyView on unpkg · L793

Findings

2 Critical5 High6 Medium6 Low

CriticalCritical Secretagent/agent/redact.py

CriticalSecret Patternagent/agent/redact.py

HighChild Processbin/cli.mjs

HighShellbin/cli.mjs

HighSame File Env Network Executionagent/ui-tui/src/gatewayClient.ts

HighShips High Entropy Blobagent/web/public/favicon.ico

HighPayload In Excluded Diragent/plugins/hermes-achievements/tests/test_achievement_engine.py

MediumDynamic Requireagent/ui-tui/packages/hermes-ink/src/utils/semver.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperagent/batch_runner.py

MediumStructural Risk Force Deep Review

MediumSecret Patternagent/tools/terminal_tool.py

LowScripts Present

LowEvalagent/apps/desktop/scripts/measure-synthetic-stream.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

11 flagged

agent/agent/redact.pyView file

Lines 115-155python

115

116# JSON field patterns: "apiKey": "value", "token": "value", etc.

118_JSON_FIELD_RE = re.compile(

119 rf'("{_JSON_KEY_NAMES}")\s*:\s*"([^"]+)"',

120 re.IGNORECASE,

121)

122

123# Authorization headers

124_AUTH_HEADER_RE = re.compile(

125 r"(Authorization:\s*Bearer\s+)(\S+)",

126 re.IGNORECASE,

127)

128

129# Telegram bot tokens: bot<digits>:<token> or <digits>:<token>,

130# where token part is restricted to [-A-Za-z0-9_] and length >= 30

131_TELEGRAM_RE = re.compile(

132 r"(bot)?(\d{8,}):([-A-Za-z0-9_]{30,})",

133)

134

135# Private key blocks: -----BEGIN RSA PRIVATE KEY----- ... -----END RSA PRIVATE KEY-----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

agent/agent/redact.pyView on unpkg · L135

Critical

Secret Pattern

RSA private key in agent/agent/redact.py

agent/agent/redact.pyView on unpkg · L135

136_PRIVATE_KEY_RE = re.compile(

137 r"-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z ]*PRIVATE KEY-----"

138)

139

140# Database connection strings: protocol://user:PASSWORD@host

141# Catches postgres, mysql, mongodb, redis, amqp URLs and redacts the password

142_DB_CONNSTR_RE = re.compile(

143 r"((?:postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|amqp)://[^:]+:)([^@]+)(@)",

144 re.IGNORECASE,

145)

146

147# JWT tokens: header.payload[.signature] — always start with "eyJ" (base64 for "{")

148# Matches 1-part (header only), 2-part (header.payload), and full 3-part JWTs.

149_JWT_RE = re.compile(

150 r"eyJ[A-Za-z0-9_-]{10,}" # Header (always starts with eyJ)

151 r"(?:\.[A-Za-z0-9_=-]{4,}){0,2}" # Optional payload and/or signature

152)

153

154# E.164 phone numbers: +<country><number>, 7-15 digits

155# Negative lookahead prevents matching hex strings or identifiers

bin/cli.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// claw-agent — one-command installer for your ClawPump Hermes agent.

3//

4// npx @clawpump/claw-agent

5//

6// Bundles the agent (this npm package contains it), installs uv + Python 3.11,

7// builds an isolated venv, installs the agent, and drops a `claw` launcher on

8// your PATH. Then: `claw clawpump setup` (browser login) → all tools.

9//

10// Built on Hermes Agent by Nous Research (MIT).

12import { execSync, spawnSync }

agent/apps/desktop/scripts/measure-synthetic-stream.mjsView file

Lines 44-84javascript

44 ws.addEventListener('error', (e) => j(e), { once: true })

45 })

46 const cdp = new CDP(ws)

47 ws.addEventListener('message', (ev)

agent/ui-tui/packages/hermes-ink/src/utils/semver.tsView file

Lines 1-21typescript

1let _npmSemver: typeof import('semver') | undefined

Medium

Dynamic Require

Package source references dynamic require/import behavior.

agent/ui-tui/packages/hermes-ink/src/utils/semver.tsView on unpkg · L1

3function getNpmSemver(): typeof import('semver') {

agent/ui-tui/src/gatewayClient.tsView file

Lines 314-354typescript

314 this.publish(ev)

315 }

316

317 private handleWebSocketFrame(raw: unknown) {

318 const text = asWireText(raw)

319

320 if (!text) {

321

agent/batch_runner.pyView file

•path = agent/batch_runner.py kind = build_helper sizeBytes = 57245 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

agent/batch_runner.pyView on unpkg

agent/web/public/favicon.icoView file

•path = agent/web/public/favicon.ico kind = high_entropy_blob sizeBytes = 8482 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

agent/web/public/favicon.icoView on unpkg

agent/plugins/hermes-achievements/tests/test_achievement_engine.pyView file

•path = agent/plugins/hermes-achievements/tests/test_achievement_engine.py kind = payload_in_excluded_dir sizeBytes = 6798 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

agent/plugins/hermes-achievements/tests/test_achievement_engine.pyView on unpkg

agent/tools/terminal_tool.pyView file

Lines 773-813python

773 should prepend sudo_stdin to their stdin_data and pass the merged bytes to

774 Popen's stdin pipe.

775

776 Callers that cannot pipe subprocess stdin (modal, daytona) must embed

777 the password in the command string themselves; see their execute()

778 methods for how they handle the non-None sudo_stdin case.

779

780 If SUDO_PASSWORD is not set and an interactive UI is available

781 (HERMES_INTERACTIVE=1 or a registered sudo password callback):

782 Prompts user for password with 45s timeout, caches for session.

783

784