registry / @crewhaus/federation-protocol / 0.1.8

@crewhaus/federation-protocol@0.1.8

Cross-deployment A2A wire protocol: federation envelope (extends @crewhaus/a2a-protocol) + mTLS HTTPS POST transport with cert pinning (Section 34)

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package exposes a user-invoked HTTPS mTLS federation client and envelope validation helpers aligned with the package description.

Static reason

One or more suspicious static signals were detected.

Trigger

Caller imports the package and invokes federationCall with a URL, envelope, and credentials.

Impact

Sends the caller-provided federation envelope to the caller-provided HTTPS endpoint.

Mechanism

caller-directed HTTPS POST with mTLS and certificate pinning

Rationale

Static source inspection shows the suspicious network and secret signals are package-aligned transport and PEM validation behavior, not install/import-time execution or credential exfiltration. No concrete malicious behavior, persistence, destructive action, AI-agent control mutation, or hidden payload was found.

Evidence

package.jsondist/index.jsdist/index.d.tsdist/test-helpers.jsdist/test-helpers.d.ts

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for block

dist/index.js imports node:https and performs HTTPS POST in federationCall default transport.
dist/index.js accepts caller-supplied credentials and checks PEM markers, which likely triggered secret-pattern scanning.

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks and exports only dist/index.js.
dist/index.js network target is caller-supplied opts.url, restricted to https:, and used for documented mTLS federation transport.
dist/index.js has no env reads, filesystem access, child_process, eval/vm/Function, dynamic require/import, native binaries, or persistence writes.
dist/index.js PEM/private-key strings are validation markers; no embedded private key or credential value is present.
dist/test-helpers.js and declaration files are not exported entrypoints and no hidden execution hooks were found.

Behavioral surface

Source

CryptoFilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 10.1 KB of source

Source & flagged code

4 flagged

dist/index.jsView file

Lines 88-130javascript

88 p.deployment.length > 0 &&

89 p.role.length > 0);

90}

91export async function federationCall(opts) {

92 validateCredentials(opts.credentials);

93 const transport = opts.transport ?? defaultTransport(opts.timeoutMs ?? 30_000);

94 return transport(opts.url, opts.envelope, opts.credentials);

95}

96/**

97 * Asserts the credentials are well-formed BEFORE we try to build a TLS

98 * agent. Surfaces clear, actionable errors instead of openssl-flavoured

99 * mystery.

100 */

101export function validateCredentials(creds) {

102 if (!creds.caCertPem.includes("-----BEGIN CERTIFICATE-----")) {

103 throw new FederationProtocolError("credentials: caCertPem is not PEM-encoded");

104 }

105 if (!creds.clientCertPem.includes("-----BEGIN CERTIFICATE-----")) {

106 throw new FederationProtocolError("credentials: clientCertPem is not PEM-encoded");

107 }

108 if (!creds.clientKeyPem.includes("-----BEGIN PRIVATE KEY-----") &&

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.jsView on unpkg · L108

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L108

109 !creds.clientKeyPem.includes("-----BEGIN RSA PRIVATE KEY-----") &&

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L109

110 !creds.clientKeyPem.includes("-----BEGIN EC PRIVATE KEY-----")) {

Critical

Secret Pattern

EC private key in dist/index.js

dist/index.jsView on unpkg · L110

111 throw new FederationProtocolError("credentials: clientKeyPem is not PEM-encoded");

112 }

113 if (!/^[0-9a-f]{64}$/.test(creds.pinnedFingerprint)) {

114 throw new FederationProtocolError(`credentials: pinnedFingerprint must be 64-char hex sha256 (got ${creds.pinnedFingerprint.length} chars)`);

115 }

116 // Sanity: keys parse + cert parses + cert hasn't expired

117 try {

118 createPublicKey(creds.clientCertPem);

119 createPrivateKey(creds.clientKeyPem);

120 }

121 catch (cause) {

122 throw new FederationProtocolError("credentials: client cert/key did not parse", cause);

123 }

124 try {

125 const cert = new X509Certificate(creds.clientCertPem);

126 const now = Date.now();

127 if (Date.parse(cert.validTo) < now) {

128 throw new FederationProtocolError(`credentials: client cert expired at ${cert.validTo}`);

129 }

130 }

Source & flagged code

4 flagged · loading source

dist/index.jsView file

108patternName = private_key_rsa severity = critical line = 108 matchedText = if (!cre...) &&

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.jsView on unpkg · L108

108patternName = private_key_rsa severity = critical line = 108 matchedText = if (!cre...) &&

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L108

109patternName = private_key_rsa severity = critical line = 109 matchedText = !creds.c...) &&

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L109

110patternName = private_key_ec severity = critical line = 110 matchedText = !creds.c...)) {

Critical

Secret Pattern

EC private key in dist/index.js

dist/index.jsView on unpkg · L110

Findings

4 Critical1 Medium2 Low

CriticalCritical Secretdist/index.js

CriticalSecret Patterndist/index.js

MediumNetwork

LowScripts Present

LowFilesystem

Source & flagged code

4 flagged

dist/index.jsView file

Lines 88-130javascript

88 p.deployment.length > 0 &&

89 p.role.length > 0);

90}

91export async function federationCall(opts) {

92 validateCredentials(opts.credentials);

93 const transport = opts.transport ?? defaultTransport(opts.timeoutMs ?? 30_000);

94 return transport(opts.url, opts.envelope, opts.credentials);

95}

96/**

97 * Asserts the credentials are well-formed BEFORE we try to build a TLS

98 * agent. Surfaces clear, actionable errors instead of openssl-flavoured

99 * mystery.

100 */

101export function validateCredentials(creds) {

102 if (!creds.caCertPem.includes("-----BEGIN CERTIFICATE-----")) {

103 throw new FederationProtocolError("credentials: caCertPem is not PEM-encoded");

104 }

105 if (!creds.clientCertPem.includes("-----BEGIN CERTIFICATE-----")) {

106 throw new FederationProtocolError("credentials: clientCertPem is not PEM-encoded");

107 }

108 if (!creds.clientKeyPem.includes("-----BEGIN PRIVATE KEY-----") &&

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/index.jsView on unpkg · L108

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L108

109 !creds.clientKeyPem.includes("-----BEGIN RSA PRIVATE KEY-----") &&

Critical

Secret Pattern

RSA private key in dist/index.js

dist/index.jsView on unpkg · L109

110 !creds.clientKeyPem.includes("-----BEGIN EC PRIVATE KEY-----")) {

Critical

Secret Pattern

EC private key in dist/index.js

dist/index.jsView on unpkg · L110

111 throw new FederationProtocolError("credentials: clientKeyPem is not PEM-encoded");

112 }

113 if (!/^[0-9a-f]{64}$/.test(creds.pinnedFingerprint)) {

114 throw new FederationProtocolError(`credentials: pinnedFingerprint must be 64-char hex sha256 (got ${creds.pinnedFingerprint.length} chars)`);

115 }

116 // Sanity: keys parse + cert parses + cert hasn't expired

117 try {

118 createPublicKey(creds.clientCertPem);

119 createPrivateKey(creds.clientKeyPem);

120 }

121 catch (cause) {

122 throw new FederationProtocolError("credentials: client cert/key did not parse", cause);

123 }

124 try {

125 const cert = new X509Certificate(creds.clientCertPem);

126 const now = Date.now();

127 if (Date.parse(cert.validTo) < now) {

128 throw new FederationProtocolError(`credentials: client cert expired at ${cert.validTo}`);

129 }

130 }