registry / @livx.cc/agentx / 0.99.81

@livx.cc/agentx@0.99.81

⚠ Under review

Edge-native AI agent runtime — drives a virtual filesystem via any LLM (ai.libx.js). Same bytes run in node, browser, or edge.

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 19 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsPossibleObfuscationUrlStrings

Manifest

WildcardDependency

scanned 6 file(s), 1.52 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.firecrawl.dev, api.tavily.com, bodify.bod.ee, github.com, html.duckduckgo.com, registry.npmjs.org, www.apple.com

Source & flagged code

10 flagged

dist/tools.shell.jsView file

Lines 862-902javascript

862 arm() {

863 if (this.timer || !this.options.sweepMs) return;

864 this.timer = setInterval(() => {

865 const live = [...this.jobs.values()].some((j) => j.status === "running" && (j.idleMs || j.hardCapMs));

866 if (!live) {

867 clearInterval(this.timer);

868 this.timer = void 0;

869 return;

870 }

871 void this.sweep().catch((e) => log6.warn(`job sweep failed: ${e}`));

872 }, this.options.sweepMs);

873 this.timer.unref?.();

874 }

875 /** Stop the reaper timer (tests / teardown). */

876 dispose() {

877 if (this.timer) clearInterval(this.timer);

878 this.timer = void 0;

879 }

880};

881

882// src/platform.ts

883import { spawnSync, execFile } from "child_process";

884import { statSync as statSync3 } from "fs";

High

Child Process

Package source references child process execution.

dist/tools.shell.jsView on unpkg · L882

885import * as np from "path";

886var IS_WIN = process.platform === "win32";

887var POSIX_SH = { bin: "/bin/sh", args: (c) => ["-c", c], label: "/bin/sh", kind: "sh" };

888function specFor(bin) {

889 const name = np.basename(bin).toLowerCase().replace(/\.exe$/, "");

890 if (name === "powershell" || name === "pwsh") {

891 const pre = "$ProgressPreference='SilentlyContinue';[Console]::OutputEncoding=[Text.Encoding]::UTF8;$OutputEncoding=[Text.Encoding]::UTF8;";

892 return {

893 bin,

894 kind: "powershell",

895 label: name === "pwsh" ? "PowerShell (pwsh)" : "Windows PowerShell",

896 args: (c) => ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-EncodedCommand", Buffer.from(pre + c, "utf16le").toString("base64")]

897 };

898 }

899 if (name === "cmd") return { bin, kind: "cmd", label: "cmd.exe", args: (c) => ["/d", "/s", "/c", `"${c}"`], spawnOptions: { windowsVerbatimArguments: true } };

900 return { bin, kind: "sh", label: /bash/.test(name) && /git/i.test(bin) ? "Git Bash" : name, args: (c) => ["-c", c] };

901}

902var isFile = (p) => {

dist/cli.jsView file

2680const name = np2.basename(bin).toLowerCase().replace(/\.exe$/, ""); L2681: if (name === "powershell" || name === "pwsh") { L2682: const pre = "$ProgressPreference='SilentlyContinue';[Console]::OutputEncoding=[Text.Encoding]::UTF8;$OutputEncoding=[Text.Encoding]::UTF8;";

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L2680

12296if (!msg) return "Error: empty message"; L12297: const argv = platform2 === "darwin" ? ["osascript", ["-e", `display notification ${JSON.stringify(msg)} with title ${JSON.stringify(head)}`]] : platform2 === "linux" ? ["notify-sen... L12298: if (!argv) return `Notifications unavailable on ${platform2}.`; L12299: const extra = platform2 === "win32" ? { windowsHide: true, env: { ...process.env, AGENTX_NOTIFY_TITLE: head, AGENTX_NOTIFY_BODY: msg } } : {}; L12300: return new Promise((resolve6) => { L12301: run(argv[0], argv[1], { timeout: 5e3, ...extra }, (e) => {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L12296

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/cli.js: writeFile: 1, await ctx.fs.writeFile(path, body); await ctx.fs.writeFile(path, current); await ctx.fs.writeFile(p, content); headers: { authorization: `Bearer ${opts.key}`, "content-type": "application/json" }, async writeFile(path, content) { for (const [p, c] of this.st.writes) await this.base.writeFile(p, c); await ctx.fs.writeFile(path, next);

High

dist/index.jsView file

996try { L997: _dnsLookup = (await import("dns/promises")).lookup; L998: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L996

6275if (!/^[A-Za-z_]\w{0,39}$/.test(spec.name)) throw new Error(`invalid tool name '${spec.name}'`); L6276: const fn = new Function("args", "ctx", `"use strict"; return (async (args, ctx) => { ${spec.code} })(args, ctx);`); L6277: return {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L6275

dist/tools.shell.d.ts#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tools.shell.d.ts#virtual:normalized:round1View on unpkg

dist/mcp.client.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @livx.cc/agentx@0.99.78 matchedIdentity = npm:QGxpdnguY2MvYWdlbnR4:0.99.78 similarity = 0.636 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/mcp.client.jsView on unpkg

Source & flagged code

10 flagged · loading source

dist/tools.shell.jsView file

882// src/platform.ts L883: import { spawnSync, execFile } from "child_process"; L884: import { statSync as statSync3 } from "fs";

High

Child Process

Package source references child process execution.

dist/tools.shell.jsView on unpkg · L882

dist/cli.jsView file

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L2680

Findings

7 High6 Medium6 Low

HighChild Processdist/tools.shell.js

HighShelldist/cli.js

HighSame File Env Network Executiondist/cli.js

HighCredential Redirect Persistencedist/cli.js

HighTrigger Reachable Persistencedist/cli.js

HighSemantic Analysis Limiteddist/tools.shell.d.ts#virtual:normalized:round1

HighPrevious Version Dangerous Deltadist/mcp.client.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.js

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

Low

Affected versions and remediation

This report applies to @livx.cc/agentx@0.99.81.

See all versions of @livx.cc/agentx for other recorded verdicts.

Review the evidence and your use of @livx.cc/agentx@0.99.81 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-08 15:05:20.953Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.