registry / @infinitestudios/hands-body-and-feet / 2.3.2

@infinitestudios/hands-body-and-feet@2.3.2

Give AI agents real-world capabilities via MCP â€” email, phone, wallet, payments, virtual cards, and more

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 330 KB of source, external domains: api.agentmail.to, api.earthclassmail.com, api.paywithmoon.com, api.postscanmail.com, api.web3.storage, github.com, mainnet.base.org, ntfy.sh, opentrust.sh, polygon-rpc.com, sandbox.api.paywithmoon.com

Source & flagged code

6 flagged

dist/chunk-EBBSFNXS.jsView file

Lines 107-147javascript

107 return {

108 ready,

109 provider: ready ? "docker" : void 0,

110 availableProviders: ready ? ["docker"] : [],

111 note: ready ? hasDockerHost

Source & flagged code

6 flagged · loading source

dist/chunk-EBBSFNXS.jsView file

1403// src/control-panel/open-browser.ts L1404: import { spawn } from "child_process"; L1405: import { readFileSync as readFileSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/chunk-EBBSFNXS.jsView on unpkg · L1403

1419if (process.platform === "win32" || isWsl()) { L1420: command = "cmd.exe"; L1421: args = ["/c", "start", "", url];

High

Shell

Package source references shell execution.

dist/chunk-EBBSFNXS.jsView on unpkg · L1419

127const available = []; L128: const ipfsApiUrl = env["IPFS_API_URL"] ?? "http://localhost:5001"; L129: if (hasKey(env, "IPFS_API_URL") || ipfsApiUrl === "http://localhost:5001") { ... L173: } L174: function getCapabilityStatuses(env = process.env) { L175: return { ... L199: const pathVal = env[envPathKey] ?? ""; L200: const separator = process.platform === "win32" ? ";" : ":"; L201: const dirs = pathVal.split(separator); ... L635: try { L636: return JSON.parse(value); L637: } catch {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/chunk-EBBSFNXS.jsView on unpkg · L127

dist/chunk-YBGPBPM7.jsView file

3190steps, L3191: message: "No Hermes install found. Install Hermes first (https://github.com/NousResearch/hermes-agent), then re-run hermes_setup." L3192: }; ... L3202: try { L3203: const r = spawnSync(install.python, ["-c", PATCH_PY, install.agentDir], { L3204: encoding: "utf8", L3205: env: { ...process.env, PYTHONPATH: install.agentDir } L3206: });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/chunk-YBGPBPM7.jsView on unpkg · L3190

1243async function ngrokCreate(port, label) { L1244: const ngrok = await import("@ngrok/ngrok"); L1245: const listener = await ngrok.forward({ addr: port });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-YBGPBPM7.jsView on unpkg · L1243

54const signingInput = `${headerB64}.${payloadB64}`; L55: const expectedSig = createHmac("sha256", secret).update(signingInput).digest("base64url"); L56: if (expectedSig !== signatureB64) { ... L62: async function validatePassport(token, registryUrl) { L63: const jwtSecret = process.env["OPENTRUST_JWT_SECRET"]; L64: if (jwtSecret) { ... L68: try { L69: response = await fetch(`${registryUrl}/api/v1/passports/validate`, { L70: method: "POST", ... L152: }, L153: body: params.message L154: });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-YBGPBPM7.jsView on unpkg · L54

Findings

4 High4 Medium6 Low

HighChild Processdist/chunk-EBBSFNXS.js

HighShelldist/chunk-EBBSFNXS.js

HighSame File Env Network Executiondist/chunk-YBGPBPM7.js

HighSandbox Evasion Gated Capabilitydist/chunk-EBBSFNXS.js

MediumDynamic Requiredist/chunk-YBGPBPM7.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/chunk-YBGPBPM7.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 1383-1439javascript

1383 seedControlPanelDemoIfEmpty();

1384 } catch {

1385 }

1386 return await new Promise((resolve) => {

1387 const server = app.listen(port, "127.0.0.1", () => {

1388 panelServer = server;

1389 panelPort = port;

1390 resolve({ url: controlPanelUrl(port), port, started: true, alreadyRunning: false });

1391 });

1392 server.on("error", (e) => {

1393 resolve({

1394 url: controlPanelUrl(port),

1395 port,

1396 started: false,

1397 alreadyRunning: e.code === "EADDRINUSE"

1398 });

1399 });

1400 });

1401}

1402

1403// src/control-panel/open-browser.ts

1404import { spawn } from "child_process";

1405import { readFileSync as readFileSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/chunk-EBBSFNXS.jsView on unpkg · L1403

1406function isWsl() {

1407 if (process.platform !== "linux") return false;

1408 if (process.env["WSL_DISTRO_NAME"] || process.env["WSL_INTEROP"]) return true;

1409 try {

1410 return readFileSync2("/proc/version", "utf8").toLowerCase().includes("microsoft");

1411 } catch {

1412 return false;

1413 }

1414}

1415function openUrl(url) {

1416 try {

1417 let command;

1418 let args;

1419 if (process.platform === "win32" || isWsl()) {

1420 command = "cmd.exe";

1421 args = ["/c", "start", "", url];

High

Shell

Package source references shell execution.

dist/chunk-EBBSFNXS.jsView on unpkg · L1419

1422 } else if (process.platform === "darwin") {

1423 command = "open";

1424 args = [url];

1425 } else {

1426 command = "xdg-open";

1427 args = [url];

1428 }

1429 const child = spawn(command, args, { detached: true, stdio: "ignore" });

1430 child.on("error", () => {

1431 });

1432 child.unref();

1433 return true;

1434 } catch {

1435 return false;

1436 }

1437}

1438

1439export {

dist/chunk-YBGPBPM7.jsView file

Lines 34-74javascript

34 super(message);

35 this.statusCode = statusCode;

36 this.name = "AuthError";

37 }

38 statusCode;

39};

40function extractBearerToken(authHeader) {

41 if (!authHeader?.startsWith("Bearer ")) {

42 throw new AuthError("Missing or malformed Authorization header");

43 }

44 const token = authHeader.slice(7).trim();

45 if (!token) throw new AuthError("Empty bearer token");

46 return token;

47}

48function verifyLocalJwt(token, secret) {

49 const parts = token.split(".");

50 if (parts.length !== 3) {

51 throw new AuthError("Invalid JWT format", 401);

52 }

53 const [headerB64, payloadB64, signatureB64] = parts;

54 const signingInput = `${headerB64}.${payloadB64}`;

55 const expectedSig = createHmac("sha256", secret).update(signingInput).digest("base64url");

56 if (expectedSig !== signatureB64) {

57 throw new AuthError("Invalid JWT signature", 401);

58 }

59 const payloadJson = Buffer.from(payloadB64, "base64url").toString("utf-8");

60 return JSON.parse(payloadJson);

61}

62async function validatePassport(token, registryUrl) {

63 const jwtSecret = process.env["OPENTRUST_JWT_SECRET"];

64 if (jwtSecret) {

65 return verifyLocalJwt(token, jwtSecret);

66 }

67 let response;

68 try {

69 response = await fetch(`${registryUrl}/api/v1/passports/validate`, {

70 method: "POST",

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/chunk-YBGPBPM7.jsView on unpkg · L54

71 headers: {

72 Authorization: `Bearer ${token}`,

73 "Content-Type": "application/json"

74 }

Lines 1223-1263javascript

1223 }

1224 };

1225 proc.stdout.on("data", onData);

1226 proc.stderr.on("data", onData);

1227 proc.on("error", (err2) => {

1228 if (!resolved) {

1229 resolved = true;

Lines 3170-3210javascript

3170}

3171function hermesCliPath(install) {

3172 const localBin = join3(homedir(), ".local", "bin", "hermes");

3173 return existsSync2(localBin) ? localBin : "hermes";

3174}