Loading npm security reports…

@invokehq/foundry@0.4.0: Suspicious npm security report (Warn) | LPM Firewall

registry / @invokehq/foundry / 0.4.0

@invokehq/foundry@0.4.0

Forge AI agents locally with a governed workspace — exactly-once, receipted, no account needed. Deploy to Invoke when you're ready.

Static Scan Results

scanned 13h ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 81.6 KB of source, external domains: api.github.com, api.invokehq.run, api.openai.com, invokehq.run, mcp.deepwiki.com

Source & flagged code

1 flagged

src/commands.jsView file

Lines 1-24javascript

1"use strict";

2const fs = require("node:fs");

3const path = require("node:path");

4const readline = require("node:readline");

5const { spawn } = require("node:child_process");

6const store = require("./store");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/commands.jsView on unpkg · L4

7const { Ledger } = require("./ledger");

8const { runTool, BUILTINS, toolType } = require("./tools");

9const mcp = require("./mcp");

10const policy = require("./policy");

11const red = (s) => `\x1b[31m${s}\x1b[0m`;

13// Execute a tool locally: a connector tool ("<connector>.<tool>") proxies to its MCP

14// server; otherwise it's a built-in. The ledger (dedup + receipt) wraps this in run().

15async function executeLocal(dir, tool, params) {

16 const conns = store.readConnectors(dir);

17 const dot = tool.indexOf(".");

18 if (dot > 0) {

19 const cname = tool.slice(0, dot);

20 if (conns[cname]) return mcp.call(conns[cname].url, tool.slice(dot + 1), params);

21 }

22 return runTool(tool, params);

23}

Source & flagged code

1 flagged · loading source

src/commands.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code