registry / @event4u/agent-config / 8.10.0

@event4u/agent-config@8.10.0

⚠ Under review

Universal AI Agent OS — audited skills, governance rules, commands, and templates for AI coding tools (Claude Code, Cursor, Windsurf, Copilot).

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 849 file(s), 11.5 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.github.com, api.npmjs.org, api.openai.com, api.perplexity.ai, api.x.ai, docs.anthropic.com, generativelanguage.googleapis.com, github.com, json-schema.org, json.schemastore.org, raw.githubusercontent.com, registry.npmjs.org, www.w3.org

Source & flagged code

7 flagged

dist/install/install.mjsView file

7366// src/scripts/install.ts L7367: import { spawn, spawnSync as spawnSync2 } from "node:child_process"; L7368: import * as crypto2 from "node:crypto";

High

Child Process

Package source references child process execution.

dist/install/install.mjsView on unpkg · L7366

dist/agent-src/scripts/update_roadmap_progress.tsView file

Lines 289-329typescript

289 return false;

290 }

291 // path.parts — every component of the path; exclude if any is an excluded dir.

292 const parts = p.split(path.sep).filter((s) => s !== '');

293 if (parts.some((part) => EXCLUDE_DIRS.has(part))) {

294 return false;

295 }

296 return true;

297}

298

299type CheckboxCounts = [number, number, number, number, number, number[]];

300

301function count_checkboxes(text: string): CheckboxCounts {

302 let done = 0;

303 let open_ = 0;

304 let deferred = 0;

305 let cancelled = 0;

306 let merge_gated = 0;

307 const prs: number[] = [];

308 const matches: Array<{ start: number; group1: string }> = [];

309 CHECKBOX_RE.lastIndex = 0;

310 let m: RegExpExecArray | null;

311 while ((m = CHECKBOX_RE.exec(text)) !== null) {

High

Shell

Package source references shell execution.

dist/agent-src/scripts/update_roadmap_progress.tsView on unpkg · L309

312 matches.push({ start: m.index, group1: m[1] as string });

313 if (m.index === CHECKBOX_RE.lastIndex) {

314 CHECKBOX_RE.lastIndex++;

315 }

316 }

317 for (let i = 0; i < matches.length; i++) {

318 const c = (matches[i] as { start: number; group1: string }).group1.toLowerCase();

319 if (c === 'x') {

320 done += 1;

321 } else if (c === ' ') {

322 open_ += 1;

323 const span_end =

324 i + 1 < matches.length ? (matches[i + 1] as { start: number }).start : text.length;

325 const span = text.slice((matches[i] as { start: number }).start, span_end);

326 if (MERGE_GATED_RE.test(span)) {

327 merge_gated += 1;

328 PR_NUM_RE.lastIndex = 0;

329 let pm: RegExpExecArray | null;

dist/agent-src/templates/scripts/work_engine/_lib/agent_settings.tsView file

Lines 932-972typescript

932 for (const p of _resolve_cascade_paths(cwd, project_path)) {

933 const layer = _read_yaml(p);

934 if (!layer || Object.keys(layer).length ===

src/scripts/second_brain_retrieval.tsView file

Lines 183-223typescript

183 let poisonedRetrieved = 0;

184 let poisonedNeutralized = 0;

185 let tieSetSum = 0;

186 const perTask: Array<Record<string,

dist/agent-src/scripts/archive_completed_roadmaps.tsView file

Lines 355-395typescript

355/** Spawn the dashboard generator twin (tsx) with cwd=root, mirroring `[sys.executable, script]`. */

356function _runTwin(root: string, script: string): void {

357 // Python uses `sys.executable` — the interpreter already running this

358 // script, which is always present. The TS analog is the `tsx` that owns

359 // THIS twin, found by walking up from the script's own dir (matching the

src/scripts/smoke/router.shView file

•path = src/scripts/smoke/router.sh kind = build_helper sizeBytes = 5721 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/scripts/smoke/router.shView on unpkg

dist/server/routes/wizard.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @event4u/agent-config@8.4.1 matchedIdentity = npm:QGV2ZW50NHUvYWdlbnQtY29uZmln:8.4.1 similarity = 0.825 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/routes/wizard.jsView on unpkg

Source & flagged code

7 flagged · loading source

dist/install/install.mjsView file

7366// src/scripts/install.ts L7367: import { spawn, spawnSync as spawnSync2 } from "node:child_process"; L7368: import * as crypto2 from "node:crypto";

High

Child Process

Package source references child process execution.

dist/install/install.mjsView on unpkg · L7366

dist/agent-src/scripts/update_roadmap_progress.tsView file

309CHECKBOX_RE.lastIndex = 0; L310: let m: RegExpExecArray | null; L311: while ((m = CHECKBOX_RE.exec(text)) !== null) {

High

Shell

Package source references shell execution.

dist/agent-src/scripts/update_roadmap_progress.tsView on unpkg · L309

dist/agent-src/templates/scripts/work_engine/_lib/agent_settings.tsView file

952// eslint-disable-next-line @typescript-eslint/no-require-imports L953: YAML = require('yaml') as typeof YamlModule; L954: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/agent-src/templates/scripts/work_engine/_lib/agent_settings.tsView on unpkg · L952

src/scripts/second_brain_retrieval.tsView file

203contains invisible/control Unicode U+200B (zero width space) if (!/[<U+200B>-<U+200F><U+202A>-<U+202E><U+2066>-<U+2069>]/u.test(clean)) poisonedNeutralized += 1;

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

src/scripts/second_brain_retrieval.tsView on unpkg · L203

dist/agent-src/scripts/archive_completed_roadmaps.tsView file

375} L376: spawnSync('npx', ['tsx', script], { cwd: root, encoding: 'utf-8' }); L377: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/agent-src/scripts/archive_completed_roadmaps.tsView on unpkg · L375

src/scripts/smoke/router.shView file

•path = src/scripts/smoke/router.sh kind = build_helper sizeBytes = 5721 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/scripts/smoke/router.shView on unpkg

dist/server/routes/wizard.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/routes/wizard.jsView on unpkg

Findings

2 Critical3 High5 Medium8 Low

CriticalTrojan Source Unicodesrc/scripts/second_brain_retrieval.ts

CriticalPrevious Version Dangerous Deltadist/server/routes/wizard.js

HighChild Processdist/install/install.mjs

HighShelldist/agent-src/scripts/update_roadmap_progress.ts

HighRuntime Package Installdist/agent-src/scripts/archive_completed_roadmaps.ts

MediumDynamic Requiredist/agent-src/templates/scripts/work_engine/_lib/agent_settings.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpersrc/scripts/smoke/router.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEval

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

7 flagged

dist/install/install.mjsView file

7366// src/scripts/install.ts L7367: import { spawn, spawnSync as spawnSync2 } from "node:child_process"; L7368: import * as crypto2 from "node:crypto";

High

Child Process

Package source references child process execution.

dist/install/install.mjsView on unpkg · L7366

dist/agent-src/scripts/update_roadmap_progress.tsView file

Lines 289-329typescript

289 return false;

290 }

291 // path.parts — every component of the path; exclude if any is an excluded dir.

292 const parts = p.split(path.sep).filter((s) => s !== '');

293 if (parts.some((part) => EXCLUDE_DIRS.has(part))) {

294 return false;

295 }

296 return true;

297}

298

299type CheckboxCounts = [number, number, number, number, number, number[]];

300

301function count_checkboxes(text: string): CheckboxCounts {

302 let done = 0;

303 let open_ = 0;

304 let deferred = 0;

305 let cancelled = 0;

306 let merge_gated = 0;

307 const prs: number[] = [];

308 const matches: Array<{ start: number; group1: string }> = [];

309 CHECKBOX_RE.lastIndex = 0;

310 let m: RegExpExecArray | null;

311 while ((m = CHECKBOX_RE.exec(text)) !== null) {

High

Shell

Package source references shell execution.

dist/agent-src/scripts/update_roadmap_progress.tsView on unpkg · L309

312 matches.push({ start: m.index, group1: m[1] as string });

313 if (m.index === CHECKBOX_RE.lastIndex) {

314 CHECKBOX_RE.lastIndex++;

315 }

316 }

317 for (let i = 0; i < matches.length; i++) {

318 const c = (matches[i] as { start: number; group1: string }).group1.toLowerCase();

319 if (c === 'x') {

320 done += 1;

321 } else if (c === ' ') {

322 open_ += 1;

323 const span_end =

324 i + 1 < matches.length ? (matches[i + 1] as { start: number }).start : text.length;

325 const span = text.slice((matches[i] as { start: number }).start, span_end);

326 if (MERGE_GATED_RE.test(span)) {

327 merge_gated += 1;

328 PR_NUM_RE.lastIndex = 0;

329 let pm: RegExpExecArray | null;

dist/agent-src/templates/scripts/work_engine/_lib/agent_settings.tsView file

Lines 932-972typescript

932 for (const p of _resolve_cascade_paths(cwd, project_path)) {

933 const layer = _read_yaml(p);

934 if (!layer || Object.keys(layer).length ===

src/scripts/second_brain_retrieval.tsView file

Lines 183-223typescript

183 let poisonedRetrieved = 0;

184 let poisonedNeutralized = 0;

185 let tieSetSum = 0;

186 const perTask: Array<Record<string,

dist/agent-src/scripts/archive_completed_roadmaps.tsView file

Lines 355-395typescript

355/** Spawn the dashboard generator twin (tsx) with cwd=root, mirroring `[sys.executable, script]`. */

356function _runTwin(root: string, script: string): void {

357 // Python uses `sys.executable` — the interpreter already running this

358 // script, which is always present. The TS analog is the `tsx` that owns

359 // THIS twin, found by walking up from the script's own dir (matching the

src/scripts/smoke/router.shView file

•path = src/scripts/smoke/router.sh kind = build_helper sizeBytes = 5721 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/scripts/smoke/router.shView on unpkg

dist/server/routes/wizard.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/server/routes/wizard.jsView on unpkg