registry / @icxcoffee/chorus / 0.1.3

@icxcoffee/chorus@0.1.3

Pi extension that fans a prompt out to multiple LLM voices in parallel, then asks a distinct conductor model to synthesize the successful responses.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 7 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 56 file(s), 193 KB of source

Source & flagged code

1 flagged

dist/providers/adapters.jsView file

Lines 13-53javascript

13}

14/**

15 * Rejects non-https endpoints and link-local / cloud-metadata IPs before any

16 * credentials are attached. Localhost (loopback) is permitted over plain http

17 * for development. Throws on unsafe endpoints.

18 */

19export function assertSafeEndpoint(endpoint) {

20 let url;

21 try {

22 url = new URL(endpoint);

23 }

24 catch {

25 throw new Error(`invalid model endpoint URL: ${endpoint}`);

26 }

27 const host = url.hostname.toLowerCase().replace(/^\[|]$/g, "");

28 const isLoopback = host === "localhost" ||

29 host.endsWith(".localhost") ||

30 host === "127.0.0.1" ||

31 host === "::1" ||

32 host === "0:0:0:0:0:0:0:1";

33 if (url.protocol !== "https:" && !isLoopback) {

34 throw new Error(`chorus refuses non-https model endpoint ${url.protocol}//${host}; use https:// or localhost for local debugging`);

35 }

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/providers/adapters.jsView on unpkg · L33

36 if (isLinkLocalOrMetadata(host)) {

37 throw new Error(`chorus refuses link-local/metadata IP endpoint: ${host}`);

38 }

39}

40const METADATA_HOSTNAMES = new Set([

41 "metadata.google.internal",

42 "metadata",

43 "metadata.aws.internal",

44]);

45function isLinkLocalOrMetadata(host) {

46 const lower = host.toLowerCase();

47 // Unwrap IPv4-mapped IPv6 (::ffff:a.b.c.d / ::ffff:hex:hex, incl. the full

48 // 0:0:0:0:0:ffff:... form) so an embedded link-local/metadata IPv4 is

49 // caught instead of hiding behind a v6 wrapper.

50 const mappedIpv4 = extractIpv4FromMappedV6(lower);

51 if (mappedIpv4)

52 return isLinkLocalOrMetadata(mappedIpv4);

53 // DNS-based cloud metadata service hostnames (GCP/AWS).

Source & flagged code

1 flagged · loading source

dist/providers/adapters.jsView file

33if (url.protocol !== "https:" && !isLoopback) { L34: throw new Error(`chorus refuses non-https model endpoint ${url.protocol}//${host}; use https:// or localhost for local debugging`); L35: } ... L103: signal, L104: body: JSON.stringify({ L105: model: resolved.ref.modelId,

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/providers/adapters.jsView on unpkg · L33

Findings

1 High2 Medium4 Low

HighCloud Metadata Accessdist/providers/adapters.js

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

1 flagged

dist/providers/adapters.jsView file

Lines 13-53javascript

13}

14/**

15 * Rejects non-https endpoints and link-local / cloud-metadata IPs before any

16 * credentials are attached. Localhost (loopback) is permitted over plain http

17 * for development. Throws on unsafe endpoints.

18 */

19export function assertSafeEndpoint(endpoint) {

20 let url;

21 try {

22 url = new URL(endpoint);

23 }

24 catch {

25 throw new Error(`invalid model endpoint URL: ${endpoint}`);

26 }

27 const host = url.hostname.toLowerCase().replace(/^\[|]$/g, "");

28 const isLoopback = host === "localhost" ||

29 host.endsWith(".localhost") ||

30 host === "127.0.0.1" ||

31 host === "::1" ||

32 host === "0:0:0:0:0:0:0:1";

33 if (url.protocol !== "https:" && !isLoopback) {

34 throw new Error(`chorus refuses non-https model endpoint ${url.protocol}//${host}; use https:// or localhost for local debugging`);

35 }

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/providers/adapters.jsView on unpkg · L33

36 if (isLinkLocalOrMetadata(host)) {

37 throw new Error(`chorus refuses link-local/metadata IP endpoint: ${host}`);

38 }

39}

40const METADATA_HOSTNAMES = new Set([

41 "metadata.google.internal",

42 "metadata",

43 "metadata.aws.internal",

44]);

45function isLinkLocalOrMetadata(host) {

46 const lower = host.toLowerCase();

47 // Unwrap IPv4-mapped IPv6 (::ffff:a.b.c.d / ::ffff:hex:hex, incl. the full

48 // 0:0:0:0:0:ffff:... form) so an embedded link-local/metadata IPv4 is

49 // caught instead of hiding behind a v6 wrapper.

50 const mappedIpv4 = extractIpv4FromMappedV6(lower);

51 if (mappedIpv4)

52 return isLinkLocalOrMetadata(mappedIpv4);

53 // DNS-based cloud metadata service hostnames (GCP/AWS).