registry / @goodandready/dsh-cron / 0.2.48
@goodandready/dsh-cron@0.2.48
Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe manifest exposes the plugin entrypoint but defines no install lifecycle hook. Inspected client requests carry user-entered settings to local package routes, while the scanner’s runtime locations show DOM lifecycle cleanup rather than credential transfer.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The UI sends a settings update or a user-requested Telegram test.
Impact
No unrelated credential recipient or automatic install-time action was established.
Mechanism
The client posts form values to same-origin /dsh-cron endpoints; the flagged observer code is disconnected during cleanup.
AI rationale
The manifest exposes the plugin entrypoint but defines no install lifecycle hook. Inspected client requests carry user-entered settings to local package routes, while the scanner’s runtime locations show DOM lifecycle cleanup rather than credential transfer.
Evidence
package.jsonlib/client.jscordis.patch.yml
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes lib/index.js and has no install lifecycle hook.
- The flagged client runtime code installs a DOM observer and removes it during cleanup.
- The client submits settings and a manually requested Telegram test to same-origin /dsh-cron routes.
- cordis.patch.yml registers the plugin with empty configuration.
- The browser UI accepts the bot token through a password field and sends it to the package’s local routes.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedlib/client.jsView file
176'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L177: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L178: 'form.dockerImageLabel': 'Container image',
...
L209: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L210: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L211: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L341: 'form.preflightHttp': 'HTTP (2xx probe)',
L342: 'form.preflightShell': 'Shell command (exit code 0)',
L343: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L1395: const res = await fetch('/dsh-cron/tasks?status=' + encodeURIComponent(tab) + '&query=' + encodeURIComponent(query));
L1396: const data = await res.json();
L1397: if (gen !== fetchGenRef.current) return
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
lib/client.jsView on unpkg · L176176Trigger-reachable chain: manifest.exports -> lib/client.js
L176: 'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L177: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L178: 'form.dockerImageLabel': 'Container image',
...
L209: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L210: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L211: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L341: 'form.preflightHttp': 'HTTP (2xx probe)',
L342: 'form.preflightShell': 'Shell command (exit code 0)',
L343: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L1395: const res = await fetch('/dsh-cron/tasks?status=' + encodeURIComponent(tab) + '&query=' + encodeURIComponent(query));
L1396: const data = await
Findings
2 Critical2 High3 Medium5 Low
CriticalCredential Exfiltrationlib/client.js
CriticalTrigger Reachable Dangerous Capabilitylib/client.js
HighTrigger Reachable Credential Exfiltrationlib/client.js
HighSemantic Analysis Limitedcordis.patch.yml
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @goodandready/dsh-cron@0.2.48.
See all versions of @goodandready/dsh-cron for other recorded verdicts.
- Review the evidence and your use of @goodandready/dsh-cron@0.2.48 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.