registry / @kici-dev/agent / 0.1.26

@kici-dev/agent@0.1.26

Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 3 file(s), 532 KB of source, external domains: api.github.com, mise.run

Source & flagged code

2 flagged

dist/server.jsView file

Lines 1-35javascript

1import { fileURLToPath as __cjs_fileURLToPath } from "node:url";

2import { dirname as __cjs_dirname } from "node:path";

3__cjs_dirname(__cjs_fileURLToPath(import.meta.url));

4import { register } from "node:module";

5import crypto$1, { createCipheriv, createHash, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, randomUUID } from "node:crypto";

6import * as os$1 from "node:os";

7import os, { hostname, tmpdir } from "node:os";

8import { PassThrough, Readable, Transform, Writable } from "node:stream";

9import { serve } from "@hono/node-server";

10import { Hono } from "hono";

11import winston from "winston";

12import { RingBuffer, addLogsToArchive, chunkBuffer, createHealthRoutes, createLogger, createMeter, createMetricsRoutes, deriveSharedSecret, getPrometheusExporter, getReconnectDelay, getRequestContext, guardStartup, initTelemetry, logger, normalizeLineEndings, redactConfig, requestContext, setServiceName, setupGracefulShutdown, sha256, sha256File, toErrorMessage, validateRequiredTools } from "@kici-dev/shared";

13import { z } from "zod";

14import { LOGGER_ENV_VARS, defineEnv, validateUnknownKiciVars } from "@kici-dev/shared/env";

15import { ALLOWED_SYSTEM_VARS, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionStepStatus, InitFailureCategory, KNOWN_ROLES, PROTOCOL_VERSION, SANDBOX_DEFAULT_VARS, WS_CLOSE_AGENT_AUTH_FAILED, WS_MAX_PAYLOAD_BYTES, applyIncludeExclude, deriveOsArchLabels, expandMatrix, heartbeatSchema, hostLabel, mergeAutoLabels, orchestratorToAgentMessageSchema, parseHostPropertyAssignments, resolveRoleLabels, resolveWhenToRunOn, validateNoReservedLabels } from "@kici-dev/engine";

16import { execFile, execFileSync, execSync, fork, spawn } from "node:child_process";

17import WebSocket from "ws";

18import * as fs$1 from "node:fs";

19import fs, { existsSync } from "node:fs";

20import { ZipArchive } from "archiver";

21import path, { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

22import { fileURLToPath, pathToFileURL } from "node:url";

23import { AsyncLocalStorage } from "node:async_hooks";

24import { format, promisify } from "node:util";

25import { gcStaleTmpDirs } from "@kici-dev/core/tmp-gc";

26import fsPromises, { access, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rm, unlink, writeFile } from "node:fs/promises";

27import Docker from "dockerode";

28import { buildKiciApi, buildNeedsContext, isDynamicGroupRef, isDynamicJobFn, isParallelGroup, isStaticArray, isStaticObject } from "@kici-dev/sdk";

29import { c, x } from "tar";

30import https from "node:https";

31import http from "node:http";

32import { pipeline } from "node:stream/promises";

33import { createGunzip } from "node:zlib";

34import { normalizeRunsOnToMatchers } from "@kici-dev/engine/labels/compile";

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/server.jsView on unpkg · L15

35import { PNPM_IGNORE_BUILD_GATE_ARG, PackageManager, YarnFlavor, detectPackageManagerFromManifests, detectYarnFlavor } from "@kici-dev/shared/package-manager";

Lines 1812-1852javascript

1812*

1813* Token authentication uses git's `-c http.extraHeader` mechanism which keeps

1814* the token out of the clone URL (not visible in `git remote -v` or logs).

1815*

1816* After clone, verifies that HEAD matches the expected SHA to prevent

1817* wrong-ref execution.

1818*

1819* @throws Error

Source & flagged code

2 flagged · loading source

dist/server.jsView file

15import { ALLOWED_SYSTEM_VARS, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionStepStatus, InitFailureCategory, KNOWN_ROLES, PROTOCOL_VERSION, SANDBOX_DEFAULT_VARS, W... L16: import { execFile, execFileSync, execSync, fork, spawn } from "node:child_process"; L17: import WebSocket from "ws"; L18: import * as fs$1 from "node:fs"; ... L32: import { pipeline } from "node:stream/promises"; L33: import { createGunzip } from "node:zlib"; L34: import { normalizeRunsOnToMatchers } from "@kici-dev/engine/labels/compile"; ... L66: * deploy-stg pre-validator can inspect / re-parse without round-tripping L67: * through process.env. L68: */ ... L171: ...data, L172: agentId: data.agentId ?? `${hostname()}-${randomUUID().slice(0, 8)}`

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/server.jsView on unpkg · L15

1832if (repoUrl.startsWith("file://")) { L1833: const { mkdtemp, writeFile, rm } = await import("node:fs/promises"); L1834: const { tmpdir } = await import("node:os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/server.jsView on unpkg · L1832

Findings

1 High4 Medium5 Low

HighCloud Metadata Accessdist/server.js

MediumDynamic Requiredist/server.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

2 flagged

dist/server.jsView file

Lines 1-35javascript

1import { fileURLToPath as __cjs_fileURLToPath } from "node:url";

2import { dirname as __cjs_dirname } from "node:path";

3__cjs_dirname(__cjs_fileURLToPath(import.meta.url));

4import { register } from "node:module";

5import crypto$1, { createCipheriv, createHash, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, randomUUID } from "node:crypto";

6import * as os$1 from "node:os";

7import os, { hostname, tmpdir } from "node:os";

8import { PassThrough, Readable, Transform, Writable } from "node:stream";

9import { serve } from "@hono/node-server";

10import { Hono } from "hono";

11import winston from "winston";

13import { z } from "zod";

14import { LOGGER_ENV_VARS, defineEnv, validateUnknownKiciVars } from "@kici-dev/shared/env";

15import { ALLOWED_SYSTEM_VARS, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionStepStatus, InitFailureCategory, KNOWN_ROLES, PROTOCOL_VERSION, SANDBOX_DEFAULT_VARS, WS_CLOSE_AGENT_AUTH_FAILED, WS_MAX_PAYLOAD_BYTES, applyIncludeExclude, deriveOsArchLabels, expandMatrix, heartbeatSchema, hostLabel, mergeAutoLabels, orchestratorToAgentMessageSchema, parseHostPropertyAssignments, resolveRoleLabels, resolveWhenToRunOn, validateNoReservedLabels } from "@kici-dev/engine";

16import { execFile, execFileSync, execSync, fork, spawn } from "node:child_process";

17import WebSocket from "ws";

18import * as fs$1 from "node:fs";

19import fs, { existsSync } from "node:fs";

20import { ZipArchive } from "archiver";

21import path, { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";

22import { fileURLToPath, pathToFileURL } from "node:url";

23import { AsyncLocalStorage } from "node:async_hooks";

24import { format, promisify } from "node:util";

25import { gcStaleTmpDirs } from "@kici-dev/core/tmp-gc";

26import fsPromises, { access, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rm, unlink, writeFile } from "node:fs/promises";

27import Docker from "dockerode";

28import { buildKiciApi, buildNeedsContext, isDynamicGroupRef, isDynamicJobFn, isParallelGroup, isStaticArray, isStaticObject } from "@kici-dev/sdk";

29import { c, x } from "tar";

30import https from "node:https";

31import http from "node:http";

32import { pipeline } from "node:stream/promises";

33import { createGunzip } from "node:zlib";

34import { normalizeRunsOnToMatchers } from "@kici-dev/engine/labels/compile";

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/server.jsView on unpkg · L15

35import { PNPM_IGNORE_BUILD_GATE_ARG, PackageManager, YarnFlavor, detectPackageManagerFromManifests, detectYarnFlavor } from "@kici-dev/shared/package-manager";

Lines 1812-1852javascript

1812*

1813* Token authentication uses git's `-c http.extraHeader` mechanism which keeps

1814* the token out of the clone URL (not visible in `git remote -v` or logs).

1815*

1816* After clone, verifies that HEAD matches the expected SHA to prevent

1817* wrong-ref execution.

1818*

1819* @throws Error