registry / @ghl-ai/aw / 0.1.90
@ghl-ai/aw@0.1.90
⚠ Under reviewAgentic Workspace CLI — pull, push & manage agents, skills and commands from the registry
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedmcp.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @ghl-ai/aw@0.1.82
matchedIdentity = npm:QGdobC1haS9hdw:0.1.82
similarity = 0.941
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
mcp.mjsView on unpkg4import { existsSync, writeFileSync, readFileSync, mkdirSync, renameSync } from 'node:fs';
L5: import { execSync } from 'node:child_process';
L6: import { createInterface } from 'node:readline';
High
4import { existsSync, writeFileSync, readFileSync, mkdirSync, renameSync } from 'node:fs';
L5: import { execSync } from 'node:child_process';
L6: import { createInterface } from 'node:readline';
...
L12:
L13: const HOME = homedir();
L14: export const DEFAULT_MCP_URL = 'https://services.leadconnectorhq.com/agentic-workspace/mcp';
L15: const MCP_PREFS_FILENAME = 'mcp-preferences.json';
...
L28: try {
L29: return JSON.parse(readFileSync(filePath, 'utf8'));
L30: } catch {
...
L43:
L44: function envDisablesMcp(env = process.env) {
Findings
1 Critical5 High6 Medium5 Low
CriticalPrevious Version Dangerous Deltamcp.mjs
HighChild Processmcp.mjs
HighShellintegrations.mjs
HighSandbox Evasion Gated Capabilitymcp.mjs
HighTrigger Reachable Persistencecommands/daemon.mjs
HighRuntime Package Installcommands/c4.mjs
MediumDynamic Requirehooks/aw-usage/hooks/aw-usage-commit-created.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencecommands/daemon.mjs
MediumShips Build Helperc4/templates/claude/scripts/claude-web-bootstrap.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @ghl-ai/aw@0.1.90.
See all versions of @ghl-ai/aw for other recorded verdicts.
- Review the evidence and your use of @ghl-ai/aw@0.1.90 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.