registry / @goodandready/dsh-cron / 0.3.1
@goodandready/dsh-cron@0.3.1
Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.
AI Security Review
scanned 16d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the scanner-flagged client behavior is UI observation and event handling. The only inspected outbound heartbeat is conditional on configuration and sends a bodyless GET, so the source does not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The plugin runs when loaded; the heartbeat requires a configured URL and positive interval.
Impact
No credential disclosure or other attack impact was established.
Mechanism
The client mounts and cleans up UI elements. The heartbeat issues a GET to its configured URL without a request body.
AI rationale
The manifest has no install lifecycle hook, and the scanner-flagged client behavior is UI observation and event handling. The only inspected outbound heartbeat is conditional on configuration and sends a bodyless GET, so the source does not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exports the plugin entry point and client; no install lifecycle hook is declared.
- The flagged client code observes UI changes and subscribes to a toggle; its request helper forwards the supplied URL and options.
- cordis.patch.yml registers this plugin with empty configuration.
- The heartbeat sends a bodyless GET only when a URL and positive interval are configured.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedlib/client.jsView file
176'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L177: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L178: 'form.dockerImageLabel': 'Container image',
...
L209: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L210: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L211: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L339: 'form.preflightHttp': 'HTTP (2xx probe)',
L340: 'form.preflightShell': 'Shell command (exit code 0)',
L341: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L1128: try {
L1129: data = await res.json();
L1130: } catch (jsonErr) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
lib/client.jsView on unpkg · L176176Trigger-reachable chain: manifest.exports -> lib/client.js
L176: 'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L177: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L178: 'form.dockerImageLabel': 'Container image',
...
L209: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L210: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L211: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L339: 'form.preflightHttp': 'HTTP (2xx probe)',
L340: 'form.preflightShell': 'Shell command (exit code 0)',
L341: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L1128: try {
L1129: data = await res.json();
L1130: } catch (jsonErr) {
Critical
Trigger Reachable Dangerous Capability
Findings
2 Critical2 High3 Medium5 Low
CriticalCredential Exfiltrationlib/client.js
CriticalTrigger Reachable Dangerous Capabilitylib/client.js
HighTrigger Reachable Credential Exfiltrationlib/client.js
HighSemantic Analysis Limitedcordis.patch.yml
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @goodandready/dsh-cron@0.3.1.
See all versions of @goodandready/dsh-cron for other recorded verdicts.
- Review the evidence and your use of @goodandready/dsh-cron@0.3.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.