registry / @keystrokehq/platform / 0.1.24

@keystrokehq/platform@0.1.24

AI Security Review

scanned 9d ago · by lpm-firewall-ai

No confirmed malicious attack surface was found. Risky primitives are part of a platform server/runtime and bundled command utilities, activated by explicit runtime use rather than install or import.

Static reason

One or more suspicious static signals were detected.

Trigger

User explicitly runs the platform server or invokes bundled runtime commands.

Impact

No evidence of credential harvesting, unsolicited exfiltration, persistence, destructive behavior, or AI-agent control-surface mutation.

Mechanism

Package-aligned server, storage, scheduler, proxy, and sandbox utilities.

Rationale

Static source inspection found suspicious primitives, but they are aligned with the package's platform server and user-invoked runtime features, with no lifecycle or import-time execution path. No concrete malicious behavior or unconsented persistence/exfiltration was established.

Evidence

package.jsondist/run.mjsdist/config.mjsdist/start-Bkcu3Xyf.mjsdist/dist-DEUmH1sy.mjsdist/js-exec-N5KEZBH7-yV-xrF3D.mjs

Network endpoints2

ai-gateway.vercel.shapi.exa.ai

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no install/preinstall/postinstall lifecycle hooks and exports only dist entrypoints.
dist/run.mjs only starts the platform server via definePlatformConfig/startPlatformServer.
dist/config.mjs imports default plugins but performs no install/import-time network or shell action.
dist/start-Bkcu3Xyf.mjs network use is server/runtime-aligned: AI Gateway, Exa proxy, Slack webhook, S3, and configured platform URLs.
dist/dist-DEUmH1sy.mjs child_process spawnSync only extracts a route manifest from a provided artifact tarball using tar in a temp directory.
dist/js-exec-N5KEZBH7-yV-xrF3D.mjs implements a user-invoked sandbox command, not package install/import execution.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsObfuscatedTelemetryUrlStrings

Manifest

NoLicense

scanned 212 file(s), 7.40 MB of source, external domains: 127.0.0.1, ai-gateway.vercel.sh, angular.io, api.exa.ai, api.keystroke.ai, chat-sdk.dev, cscott.net, datatracker.ietf.org, dom.spec.whatwg.org, example.com, github.com, json-schema.org, landley.net, raw.githubusercontent.com, trac.webkit.org, www.ibm.com, www.w3.org, www.whatwg.org

Source & flagged code

7 flagged

dist/start-BXs2tRMp.cjsView file

Lines 22409-22449javascript

22409 _matcher = null;

22410 _matcherInput = null;

22411 acquireMatcher(t) {

22412 return this._matcher === null ? (this._matcher = this._re2.matcher(t), this._matcherInput = t, this._matcher) : (this._matcherInput !== t && (this._matcher.matcherInput.charSequence = t, this._matcherInput = t), this._matcher.reset(), this._matcher);

22413 }

22414 constructor(t, e = "") {

22415 this._pattern = t, this._flags = e, this._global = e.includes("g"), this._ignoreCase = e.includes("i"), this._multiline = e.includes("m");

22416 try {

22417 let s = L1(t), n = x1(e);

22418 this._re2 = y.compile(s, n);

22419 } catch (s) {

22420 if (s instanceof m$1) {

22421 let n = s.message || "", r = "";

22422 throw n.includes("(?=") || n.includes("(?!") || n.includes("(?<") || n.includes("(?<!") || t.includes("(?=") || t.includes("(?!") || t.includes("(?<=") || t.includes("(?<!"

22423 }

22424 throw s;

22425 }

22426 }

22427 test(t) {

22428 return this._global && (this._lastIndex = 0), this.acquireMatcher(t).find();

22429 }

22430 exec(t) {

22431 let e = this.acquireMatcher(t), s = this._global ? this._lastIndex : 0;

High

Child Process

Package source references child process execution.

dist/start-BXs2tRMp.cjsView on unpkg · L22429

22432 if (!e.find(s)) return this._global && (this._lastIndex = 0), null;

22433 let n = this._re2.groupCount(), r = [];

22434 r.push(e.group(0) ?? "");

22435 for (let h = 1; h <= n; h++) {

22436 let p = e.group(h);

22437 r.push(p);

22438 }

22439 let a = r;

22440 a.index = e.start(0), a.input = t;

22441 let o = this._re2.namedGroups();

22442 if (o && Object.keys(o).length > 0) {

22443 let h = Object.create(null);

22444 for (let [p, f] of Object.entries(o)) {

22445 let A = e.group(f);

22446 A !== null && (h[p] = A);

22447 }

22448 a.groups = h;

22449 }

Long lines were clipped for display.

dist/chunk-TN7HHBQW-D_SK6w5n.cjsView file

Lines 1-37javascript

1const require_chunk_BZUGFHVS = require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");

2//#region ../../node_modules/.pnpm/just-bash@3.0.1/node_modules/just-bash/dist/bundle/chunks/chunk-TN7HHBQW.js

3(0, require("node:module").createRequire)(require("url").pathToFileURL(__filename).href);

4function v() {

5 let

dist/wc-LF7NU4LA-C4FhC6BH.cjsView file

Lines 1-21javascript

1const require_start = require("./start-BXs2tRMp.cjs");

2require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/wc-LF7NU4LA-C4FhC6BH.cjsView on unpkg · L1

3const require_chunk_QAYAQNCG = require("./chunk-QAYAQNCG-ROQh1hrZ.cjs");

4const

dist/dist-DEUmH1sy.mjsView file

7import { AsyncLocalStorage } from "node:async_hooks"; L8: import { deleteSecretValuesForRef, ensureOAuthApp, getOrganizationScopeId, saveOAuthConnection, selectSecretValue, upsertSecretValue } from "@keystrokehq/platform-database"; L9: import { createCipheriv, createDecipheriv, createHash, randomBytes, randomUUID } from "node:crypto"; L10: import * as z$1 from "zod/v4"; ... L17: import { join } from "node:path"; L18: import { spawnSync } from "node:child_process"; L19: import { tmpdir } from "node:os"; ... L593: * (timestamps embedded in the id). Use {@link cuid2} instead. L594: * See https://github.com/paralleldrive/cuid. L595: */ ... L4792: "previews", L4793: "private",

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

dist/js-exec-N5KEZBH7-yV-xrF3D.mjsView file

Lines 20-60javascript

20 --strip-types Strip TypeScript type annotations

21 --version, -V Show version

22 --help Show this help

24Examples:

25 js-exec -c "console.log(1 + 2)"

26 js-exec script.js

27 js-exec app.ts

28 echo 'console.log("hello")' | js-exec

30File Extension Auto-Detection:

Source & flagged code

7 flagged · loading source

dist/start-BXs2tRMp.cjsView file

22429} L22430: exec(t) { L22431: let e = this.acquireMatcher(t), s = this._global ? this._lastIndex : 0;

High

Child Process

Package source references child process execution.

dist/start-BXs2tRMp.cjsView on unpkg · L22429

dist/chunk-TN7HHBQW-D_SK6w5n.cjsView file

17strategy: "throw", L18: reason: "eval() allows arbitrary code execution" L19: },

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-TN7HHBQW-D_SK6w5n.cjsView on unpkg · L17

dist/wc-LF7NU4LA-C4FhC6BH.cjsView file

1const require_start = require("./start-BXs2tRMp.cjs"); L2: require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/wc-LF7NU4LA-C4FhC6BH.cjsView on unpkg · L1

dist/dist-DEUmH1sy.mjsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

dist/js-exec-N5KEZBH7-yV-xrF3D.mjsView file

40Cross-file remote execution chain: dist/js-exec-N5KEZBH7-yV-xrF3D.mjs spawns dist/chunk-TN7HHBQW-B8PYcKz5.mjs; helper contains network access plus dynamic code execution. L40: Available modules: L41: fs, path, child_process, process, console, L42: os, url, assert, util, events, buffer, stream, ... L55: child_process: L56: execSync(cmd) throws on non-zero exit, returns stdout L57: spawnSync(cmd, args) returns { stdout, stderr, status } ... L61: L62: os: platform(), arch(), homedir(), tmpdir(), type(), hostname(), L63: EOL, cpus(), endianness() L64: L65: url: URL, URLSearchParams, parse(), format() L66:

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/js-exec-N5KEZBH7-yV-xrF3D.mjsView on unpkg · L40

Findings

4 High5 Medium9 Low

HighChild Processdist/start-BXs2tRMp.cjs

HighShell

HighCloud Metadata Accessdist/dist-DEUmH1sy.mjs

HighCross File Remote Execution Contextdist/js-exec-N5KEZBH7-yV-xrF3D.mjs

MediumDynamic Requiredist/wc-LF7NU4LA-C4FhC6BH.cjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/dist-DEUmH1sy.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/chunk-TN7HHBQW-D_SK6w5n.cjs

LowWeak Cryptodist/dist-DEUmH1sy.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

LowNo License

Source & flagged code

7 flagged

dist/start-BXs2tRMp.cjsView file

Lines 22409-22449javascript

22409 _matcher = null;

22410 _matcherInput = null;

22411 acquireMatcher(t) {

22413 }

22414 constructor(t, e = "") {

22415 this._pattern = t, this._flags = e, this._global = e.includes("g"), this._ignoreCase = e.includes("i"), this._multiline = e.includes("m");

22416 try {

22417 let s = L1(t), n = x1(e);

22418 this._re2 = y.compile(s, n);

22419 } catch (s) {

22420 if (s instanceof m$1) {

22421 let n = s.message || "", r = "";

22422 throw n.includes("(?=") || n.includes("(?!") || n.includes("(?<") || n.includes("(?<!") || t.includes("(?=") || t.includes("(?!") || t.includes("(?<=") || t.includes("(?<!"

22423 }

22424 throw s;

22425 }

22426 }

22427 test(t) {

22428 return this._global && (this._lastIndex = 0), this.acquireMatcher(t).find();

22429 }

22430 exec(t) {

22431 let e = this.acquireMatcher(t), s = this._global ? this._lastIndex : 0;

High

Child Process

Package source references child process execution.

dist/start-BXs2tRMp.cjsView on unpkg · L22429

22432 if (!e.find(s)) return this._global && (this._lastIndex = 0), null;

22433 let n = this._re2.groupCount(), r = [];

22434 r.push(e.group(0) ?? "");

22435 for (let h = 1; h <= n; h++) {

22436 let p = e.group(h);

22437 r.push(p);

22438 }

22439 let a = r;

22440 a.index = e.start(0), a.input = t;

22441 let o = this._re2.namedGroups();

22442 if (o && Object.keys(o).length > 0) {

22443 let h = Object.create(null);

22444 for (let [p, f] of Object.entries(o)) {

22445 let A = e.group(f);

22446 A !== null && (h[p] = A);

22447 }

22448 a.groups = h;

22449 }

Long lines were clipped for display.

dist/chunk-TN7HHBQW-D_SK6w5n.cjsView file

Lines 1-37javascript

1const require_chunk_BZUGFHVS = require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");

2//#region ../../node_modules/.pnpm/just-bash@3.0.1/node_modules/just-bash/dist/bundle/chunks/chunk-TN7HHBQW.js

3(0, require("node:module").createRequire)(require("url").pathToFileURL(__filename).href);

4function v() {

5 let

dist/wc-LF7NU4LA-C4FhC6BH.cjsView file

Lines 1-21javascript

1const require_start = require("./start-BXs2tRMp.cjs");

2require("./chunk-BZUGFHVS-7RRM7Jpb.cjs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/wc-LF7NU4LA-C4FhC6BH.cjsView on unpkg · L1

3const require_chunk_QAYAQNCG = require("./chunk-QAYAQNCG-ROQh1hrZ.cjs");

4const

dist/dist-DEUmH1sy.mjsView file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/dist-DEUmH1sy.mjsView on unpkg · L7

dist/js-exec-N5KEZBH7-yV-xrF3D.mjsView file

Lines 20-60javascript

20 --strip-types Strip TypeScript type annotations

21 --version, -V Show version

22 --help Show this help

24Examples:

25 js-exec -c "console.log(1 + 2)"

26 js-exec script.js

27 js-exec app.ts

28 echo 'console.log("hello")' | js-exec

30File Extension Auto-Detection: