registry / @ghl-ai/aw / 0.1.83
@ghl-ai/aw@0.1.83
⚠ Under reviewAgentic Workspace CLI — pull, push & manage agents, skills and commands from the registry
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedmcp.mjsView file
4import { existsSync, writeFileSync, readFileSync, mkdirSync, renameSync } from 'node:fs';
L5: import { execSync } from 'node:child_process';
L6: import { createInterface } from 'node:readline';
High
4import { existsSync, writeFileSync, readFileSync, mkdirSync, renameSync } from 'node:fs';
L5: import { execSync } from 'node:child_process';
L6: import { createInterface } from 'node:readline';
...
L12:
L13: const HOME = homedir();
L14: const DEFAULT_MCP_URL = 'https://services.leadconnectorhq.com/agentic-workspace/mcp';
L15: const MCP_PREFS_FILENAME = 'mcp-preferences.json';
...
L28: try {
L29: return JSON.parse(readFileSync(filePath, 'utf8'));
L30: } catch {
...
L43:
L44: function envDisablesMcp(env = process.env) {
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
mcp.mjsView on unpkg · L4integrations.mjsView file
27L28: const execAsync = promisify(exec);
L29: const HOME = homedir();
Findings
1 Critical4 High6 Medium5 Low
CriticalPrevious Version Dangerous Deltacommands/push.mjs
HighChild Processmcp.mjs
HighShellintegrations.mjs
HighSandbox Evasion Gated Capabilitymcp.mjs
HighRuntime Package Installcommands/c4.mjs
MediumDynamic Requirehooks/aw-usage/hooks/aw-usage-commit-created.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencecommands/daemon.mjs
MediumShips Build Helperc4/templates/claude/scripts/claude-web-bootstrap.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @ghl-ai/aw@0.1.83.
See all versions of @ghl-ai/aw for other recorded verdicts.
- Review the evidence and your use of @ghl-ai/aw@0.1.83 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.