registry / @goodandready/dsh-cron / 0.2.6
@goodandready/dsh-cron@0.2.6
Scheduled cron tasks, background automation and agent execution for DeepSeek Harness.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package has a real scheduled command-execution and output-delivery capability that is reachable through its agent plugin interface. Its source shows no concrete covert or install-time attack, so it should be warned rather than blocked.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The DSH host loads the plugin with an active task, or an agent invokes its task-creation tool.
Impact
A caller able to create a task can obtain delayed command execution and send command output to a configured external service.
Mechanism
Scheduled command execution with configurable output delivery.
AI rationale
The package has a real scheduled command-execution and output-delivery capability that is reachable through its agent plugin interface. Its source shows no concrete covert or install-time attack, so it should be warned rather than blocked.
Evidence
lib/index.jslib/runner.jslib/runtimes.jslib/channels.jsDSH_DATA_DIR/cron/tasks.json
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Loading the plugin starts persisted active tasks and exposes tools that create scheduled tasks.
- Scheduled external tasks execute task-provided commands through a shell with the inherited process environment.
- Run reports, including output or errors, can be sent to configured webhook endpoints.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- No hard-coded exfiltration endpoint, hidden payload, self-dependency, or reviewer-directed text was found.
- The risky behavior is explicit scheduler and DSH-plugin functionality rather than covert install-time action.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedlib/runner.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @goodandready/dsh-cron@0.2.5
matchedIdentity = npm:QGdvb2RhbmRyZWFkeS9kc2gtY3Jvbg:0.2.5
similarity = 0.556
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
lib/runner.jsView on unpkg72async createTaskWorktree(cwd, task) {
L73: const { execFile } = await import('node:child_process');
L74: const path = await import('node:path');
High
92await new Promise((resolve) => {
L93: execFile('git', ['-C', cwd, 'worktree', 'remove', wtPath], { maxBuffer: 4 * 1024 * 1024 }, (err, stdout, stderr) => {
L94: if (err) {
...
L103: async _runHttp(task, request, signal) {
L104: const res = await fetch(request.url, {
L105: method: request.method,
L106: headers: request.headers,
L107: body: request.body,
L108: signal,
High
Command Output Exfiltration
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltalib/runner.js
HighChild Processlib/runner.js
HighCommand Output Exfiltrationlib/runner.js
HighTrigger Reachable Command Output Exfiltrationlib/runner.js
HighSemantic Analysis Limitedcordis.patch.yml
MediumNetwork
MediumEnvironment Vars
MediumAi Review Evidencelib/index.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @goodandready/dsh-cron@0.2.6.
See all versions of @goodandready/dsh-cron for other recorded verdicts.
- Review the evidence and your use of @goodandready/dsh-cron@0.2.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.