registry / @link-assistant/agent / 0.25.0

@link-assistant/agent@0.25.0

A minimal, public domain AI CLI agent compatible with OpenCode's JSON interface. Bun-only runtime.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 120 file(s), 943 KB of source, external domains: 127.0.0.1, accounts.google.com, aistudio.google.com, api.anthropic.com, api.githubcopilot.com, api.kilo.ai, api.together.xyz, auth.openai.com, chat.qwen.ai, chatgpt.com, claude.ai, cloudcode-pa.googleapis.com, codeassist.google.com, company.ghe.com, console.anthropic.com, console.groq.com, console.mistral.ai, console.x.ai, dashboard.cohere.com, example.com, github.com, mcp.exa.ai, models.dev, oauth2.googleapis.com, opencode.ai, openrouter.ai, platform.deepseek.com, platform.openai.com, portal.qwen.ai, vercel.link, www.googleapis.com, www.perplexity.ai

Source & flagged code

2 flagged

src/util/token.tsView file

Lines 32-72typescript

32 * Returns an approximate token count using the ~4 chars/token rule of thumb.

33 * This is accurate to within ±20% for typical English text across most LLM

34 * tokenizers (OpenAI, Nemotron, Llama, Gemini all average 3.5–4.5 chars/token

35 * for English).

36 */

37 export function estimate(input: string) {

38 return Math.max(0, Math.round((input || '').length / CHARS_PER_TOKEN));

39 }

41 /**

42 * Lazy-loaded BPE encoder instance. Uses o200k_base encoding (GPT-4o/GPT-4.1/GPT-5).

43 * Loaded on first call to `countTokens()`. Returns `null` if gpt-tokenizer is

44 * not available.

45 */

46 let _encoder: { encode: (text: string) => number[] } | null | undefined;

48 function getEncoder(): { encode: (text: string) => number[] } | null {

49 if (_encoder !== undefined) return _encoder;

50 try {

51 // Dynamic import to keep gpt-tokenizer optional.

52 // eslint-disable-next-line @typescript-eslint/no-var-requires

53 const mod = require('gpt-tokenizer/encoding/o200k_base');

54 _encoder = mod;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/util/token.tsView on unpkg · L52

55 log.info(() => ({ message: 'loaded gpt-tokenizer (o200k_base)' }));

56 return _encoder;

57 } catch {

58 _encoder = null;

59 log.info(() => ({

60 message:

61 'gpt-tokenizer not available, using character-based estimation',

62 }));

63 return null;

64 }

65 }

67 /**

68 * Count tokens using real BPE tokenization when available, falling back to

69 * the character-based heuristic.

70 *

71 * Use this for critical paths where accuracy matters (overflow detection,

72 * output token capping). For logging or non-critical estimation, prefer

src/auth/plugins.tsView file

Lines 1-21typescript

1import crypto from 'crypto';

2import * as http from 'node:http';

3import * as net from 'node:net';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/auth/plugins.tsView on unpkg · L1

Source & flagged code

2 flagged · loading source

src/util/token.tsView file

52// eslint-disable-next-line @typescript-eslint/no-var-requires L53: const mod = require('gpt-tokenizer/encoding/o200k_base'); L54: _encoder = mod;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/util/token.tsView on unpkg · L52

src/auth/plugins.tsView file

1import crypto from 'crypto'; L2: import * as http from 'node:http'; L3: import * as net from 'node:net'; ... L87: function generateRandomString(length: number): string { L88: return crypto.randomBytes(length).toString('base64url'); L89: } ... L153: }, L154: body: JSON.stringify({ L155: code: splits[0], ... L885: const portStr = L886: process.env['OAUTH_CALLBACK_PORT'] || L887: process.env['GOOGLE_OAUTH_CALLBACK_PORT'];

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/auth/plugins.tsView on unpkg · L1

Findings

1 High4 Medium5 Low

HighSandbox Evasion Gated Capabilitysrc/auth/plugins.ts

MediumDynamic Requiresrc/util/token.ts

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

src/util/token.tsView file

Lines 32-72typescript

32 * Returns an approximate token count using the ~4 chars/token rule of thumb.

33 * This is accurate to within ±20% for typical English text across most LLM

34 * tokenizers (OpenAI, Nemotron, Llama, Gemini all average 3.5–4.5 chars/token

35 * for English).

36 */

37 export function estimate(input: string) {

38 return Math.max(0, Math.round((input || '').length / CHARS_PER_TOKEN));

39 }

41 /**

42 * Lazy-loaded BPE encoder instance. Uses o200k_base encoding (GPT-4o/GPT-4.1/GPT-5).

43 * Loaded on first call to `countTokens()`. Returns `null` if gpt-tokenizer is

44 * not available.

45 */

46 let _encoder: { encode: (text: string) => number[] } | null | undefined;

48 function getEncoder(): { encode: (text: string) => number[] } | null {

49 if (_encoder !== undefined) return _encoder;

50 try {

51 // Dynamic import to keep gpt-tokenizer optional.

52 // eslint-disable-next-line @typescript-eslint/no-var-requires

53 const mod = require('gpt-tokenizer/encoding/o200k_base');

54 _encoder = mod;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/util/token.tsView on unpkg · L52

55 log.info(() => ({ message: 'loaded gpt-tokenizer (o200k_base)' }));

56 return _encoder;

57 } catch {

58 _encoder = null;

59 log.info(() => ({

60 message:

61 'gpt-tokenizer not available, using character-based estimation',

62 }));

63 return null;

64 }

65 }

67 /**

68 * Count tokens using real BPE tokenization when available, falling back to

69 * the character-based heuristic.

70 *

71 * Use this for critical paths where accuracy matters (overflow detection,

72 * output token capping). For logging or non-critical estimation, prefer

src/auth/plugins.tsView file

Lines 1-21typescript

1import crypto from 'crypto';

2import * as http from 'node:http';

3import * as net from 'node:net';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/auth/plugins.tsView on unpkg · L1