registry / @kontourai/flow-agents / 4.1.0

@kontourai/flow-agents@4.1.0

Flow Agents — a Kontour product that applies Flow and Veritas discipline as a portable process layer inside the agent tools you already use: Claude Code, Codex, Kiro, opencode, pi, and GitHub Actions — with framework adapters (AWS Strands preview) on the

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 22 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,632 file(s), 26.3 MB of source, external domains: 127.0.0.1, 192.0.2.1, a-different-host.example.test, console.example.com, console.example.test, console.kontourai.io, example.com, example.invalid, example.test, github.com, hachure.org, in-toto.io, kontourai.dev, model-provider.example, opencode.ai, synthetic-hosted.example.test

Source & flagged code

13 flagged

evals/integration/test_hook_category_behaviors.shView file

Lines 135-175shell

135 pass "post-edit accumulator and stop formatter cooperate without blocking"

136 else

137 fail "stop formatter should fail open"

138 fi

139else

140 fail "post-edit accumulator should pass through"

141fi

142

143if node "$ROOT/scripts/hooks/quality-gate.js" >"$TMPDIR_EVAL/quality.out" 2>"$TMPDIR_EVAL/quality.err" <<JSON

144{"hook_event_name":"PostToolUse","tool_input":{"path":"$TMPDIR_EVAL/repo/example.ts"}}

145JSON

146then

147 pass "quality policy hook is non-blocking"

148else

149 fail "quality policy hook should be non-blocking"

150fi

151

152audit_dir="$TMPDIR_EVAL/audit"

153mkdir -p "$audit_dir/sessions"

154printf '{"session_id":"session-1"}\n' > "$audit_dir/sessions/one.session"

155if printf '%s\n' '{"hook_event_name":"PreToolUse","tool_name":"Bash","tool_input":{"command":"echo AKIA1234567890ABCDEF && rm -rf /tmp/example"}}' \

Critical

Critical Secret

Package contains a critical-looking secret pattern.

evals/integration/test_hook_category_behaviors.shView on unpkg · L155

Critical

Secret Pattern

AWS access key ID in evals/integration/test_hook_category_behaviors.sh

evals/integration/test_hook_category_behaviors.shView on unpkg · L155

156 | TELEMETRY_GOVERNANCE=true TELEMETRY_DATA_DIR="$audit_dir" TELEMETRY_SESSION_DIR="$audit_dir/sessions" bash "$ROOT/scripts/hooks/governance-audit.sh" preToolUse dev >"$TMPDIR_EVAL/governance.out" 2>"$TMPDIR_EVAL

157 for _audit_wait in $(seq 1 50); do

158 if [[ -s "$audit_dir/audit.jsonl" ]] \

159 && grep -q '"event_type":"governance.secret_detected"' "$audit_dir/audit.jsonl" \

160 && grep -q '"event_type":"governance.destructive_operation"' "$audit_dir/audit.jsonl"; then

161 break

162 fi

163 sleep 0.1

164 done

165 if [[ -s "$audit_dir/audit.jsonl" ]] \

166 && grep -q '"event_type":"governance.secret_detected"' "$audit_dir/audit.jsonl" \

167 && grep -q '"event_type":"governance.destructive_operation"' "$audit_dir/audit.jsonl"; then

168 pass "governance audit policy emits audit events through shared libraries"

169 else

170 fail "governance audit did not emit expected audit events"

171 fi

172else

173 fail "governance audit should fail open"

174fi

175

packaging/conformance/run-conformance.jsView file

Lines 2-42javascript

2/**

3 * run-conformance.js — Flow Agents policy engine conformance test runner.

4 *

5 * Usage:

6 * node packaging/conformance/run-conformance.js --self

7 * node packaging/conformance/run-conformance.js --adapter-cmd "node my-adapter.js"

8 * node packaging/conformance/run-conformance.js --adapter-cmd "..." --level L1

9 *

10 * Options:

11 * --self Run against the canonical engine (must reach L2).

context/scripts/hooks/stop-format-typecheck.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * Stop Hook: Batch format + typecheck all JS/TS files edited this response

4 *

5 * Reads the accumulator from post-edit-accumulator.js, groups files by

6 * project root for formatter and by tsconfig dir for typecheck.

7 * Budget is distributed evenly across batches.

8 */

10'use strict';

evals/ci/run-baseline.shView file

•path = evals/ci/run-baseline.sh kind = build_helper sizeBytes = 23520 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

evals/ci/run-baseline.shView on unpkg

evals/fixtures/veritas-governance-adapter/fake-veritas-secret-fail.shView file

•path = evals/fixtures/veritas-governance-adapter/fake-veritas-secret-fail.sh kind = payload_in_excluded_dir sizeBytes = 279 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

evals/fixtures/veritas-governance-adapter/fake-veritas-secret-fail.shView on unpkg

dist/claude-code/build/src/cli/init.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @kontourai/flow-agents@4.0.0 matchedIdentity = npm:QGtvbnRvdXJhaS9mbG93LWFnZW50cw:4.0.0 similarity = 0.958 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/claude-code/build/src/cli/init.jsView on unpkg

dist/claude-code/evals/integration/test_hook_category_behaviors.shView file

Lines 135-175shell

135 pass "post-edit accumulator and stop formatter cooperate without blocking"

136 else

137 fail "stop formatter should fail open"

138 fi

139else

140 fail "post-edit accumulator should pass through"

dist/codex/evals/integration/test_hook_category_behaviors.shView file

Lines 135-175shell

135 pass "post-edit accumulator and stop formatter cooperate without blocking"

136 else

137 fail "stop formatter should fail open"

138 fi

139else

140 fail "post-edit accumulator should pass through"

dist/pi/evals/integration/test_hook_category_behaviors.shView file

Lines 135-175shell

135 pass "post-edit accumulator and stop formatter cooperate without blocking"

136 else

137 fail "stop formatter should fail open"

138 fi

139else

140 fail "post-edit accumulator should pass through"

dist/kiro/evals/integration/test_hook_category_behaviors.shView file

Lines 135-175shell

135 pass "post-edit accumulator and stop formatter cooperate without blocking"

136 else

137 fail "stop formatter should fail open"

138 fi

139else

140 fail "post-edit accumulator should pass through"

dist/base/evals/integration/test_hook_category_behaviors.shView file

155patternName = aws_access_key severity = critical line = 155 matchedText = if print...}' \

Critical

Secret Pattern

AWS access key ID in dist/base/evals/integration/test_hook_category_behaviors.sh

dist/base/evals/integration/test_hook_category_behaviors.shView on unpkg · L155

dist/opencode/evals/integration/test_hook_category_behaviors.shView file

155patternName = aws_access_key severity = critical line = 155 matchedText = if print...}' \

Critical

Secret Pattern

AWS access key ID in dist/opencode/evals/integration/test_hook_category_behaviors.sh

dist/opencode/evals/integration/test_hook_category_behaviors.shView on unpkg · L155

Source & flagged code

13 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code