registry / @goodandready/dsh-cron / 0.3.16
@goodandready/dsh-cron@0.3.16
Background automation runner for DSH: isolated agent runs, script/HTTP/SSH/Docker runtimes, cost guard, notifications, heartbeats.
AI Security Review
scanned 15d ago · by lpm-firewall-aiSource inspection found no install hook or confirmed credential exfiltration. The credential-related match is consistent with a user-requested Telegram test that uses the configured bot token for its intended service; the reported client operations concern screen and event handling.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The plugin is loaded, a user interacts with its interface, or a configured task runs.
Impact
No confirmed credential theft, unauthorized account action, or install-time attack surface was established.
Mechanism
The client mounts the cron screen and calls the plugin’s local API; the test route forwards a bot token to Telegram to send a test message. Configured preflight commands run as part of task execution.
AI rationale
Source inspection found no install hook or confirmed credential exfiltration. The credential-related match is consistent with a user-requested Telegram test that uses the configured bot token for its intended service; the reported client operations concern screen and event handling.
Evidence
package.jsonlib/client.jslib/routes.jslib/scheduler-preflight.jscordis.patch.yml.lpm-dependency-evidence-ca139805-d8de-4a26-a8dd-83a2ff6e3594/0/npm-linux/package.json.lpm-dependency-evidence-ca139805-d8de-4a26-a8dd-83a2ff6e3594/0/npm-linux/dist/croner.cjs.lpm-dependency-evidence-ca139805-d8de-4a26-a8dd-83a2ff6e3594/0/npm-linux/dist/croner.js.lpm-dependency-evidence-ca139805-d8de-4a26-a8dd-83a2ff6e3594/0/npm-linux/dist/croner.umd.js.lpm-dependency-evidence-ca139805-d8de-4a26-a8dd-83a2ff6e3594/0/npm-linux/dist/croner.d.ts.lpm-dependency-evidence-ca139805-d8de-4a26-a8dd-83a2ff6e3594/0/npm-linux/dist/croner.d.cts
Decision evidence
public snapshotAI called this Clean at 98.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the DSH cron plugin and declares no install lifecycle hook.
- The reported client runtime operations mount and remove the plugin screen and handle user interface events; the Telegram test request goes to the plugin’s own relative route.
- The Telegram test route reads the configured or submitted bot token and sends a test message through the Telegram integration.
- The preflight command capability runs a task-configured command during task execution.
- The declared croner dependency is a cron-expression library with no install scripts; its inspected distribution files implement cron functionality and its declaration files describe cron patterns.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedlib/client.jsView file
128'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L129: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L130: 'form.dockerImageLabel': 'Container image', 'form.sk[redacted]': 'Skill name',
...
L155: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L156: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L157: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L254: 'form.preflightLabel': 'Pre-flight check', 'form.preflightNone': 'None',
L255: 'form.preflightHttp': 'HTTP (2xx probe)', 'form.preflightShell': 'Shell command (exit code 0)',
L256: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L962: try {
L963: data = await res.json();
L964: } catch (jsonErr) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
lib/client.jsView on unpkg · L128128Trigger-reachable chain: manifest.exports -> lib/client.js
L128: 'form.sshTargetLabel': 'Fallback target (user@host, optional)',
L129: 'form.sshKeyLabel': 'Private key path (fallback, optional)',
L130: 'form.dockerImageLabel': 'Container image', 'form.sk[redacted]': 'Skill name',
...
L155: 'form.promptLabelLlm': 'Instruction / Prompt for the agent',
L156: 'form.promptPlaceholderScript': 'curl -fsSL https://... || exit 1',
L157: 'form.promptPlaceholderLlm': 'Describe exactly what the agent should do...',
...
L254: 'form.preflightLabel': 'Pre-flight check', 'form.preflightNone': 'None',
L255: 'form.preflightHttp': 'HTTP (2xx probe)', 'form.preflightShell': 'Shell command (exit code 0)',
L256: 'form.preflightDisk': 'Disk space (path:minPercent)',
...
L962: try {
L963: data = await res.json();
Findings
3 Critical2 High3 Medium4 Low
CriticalCredential Exfiltrationlib/client.js
CriticalTrigger Reachable Dangerous Capabilitylib/client.js
CriticalPrevious Version Dangerous Deltalib/scheduler-preflight.js
HighTrigger Reachable Credential Exfiltrationlib/client.js
HighSemantic Analysis Limitedcordis.patch.yml
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @goodandready/dsh-cron@0.3.16.
See all versions of @goodandready/dsh-cron for other recorded verdicts.
- Review the evidence and your use of @goodandready/dsh-cron@0.3.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.