registry / @m8t-stack/cli / 0.2.63
@m8t-stack/cli@0.2.63
CLI for managing m8t deployments on Azure / Microsoft Agent Foundry
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
3 flagged · loading sourcedist/cli.jsView file
12622init_errors();
L12623: import { spawn } from "child_process";
L12624: var SECRET_VALUE_FLAGS = /* @__PURE__ */ new Set(["--secure-environment-variables"]);
High
25384);
L25385: this.context.stdout.write(
L25386: colors.dim("next: run 'm8t doctor' to verify gateway + data-plane access.\n")
...
L25392: // src/commands/open.ts
L25393: import { spawn as spawn5 } from "child_process";
L25394: import { Command as Command49, Option as Option46 } from "clipanion";
...
L25398: var OPEN_TARGETS = ["webapp", "foundry", "portal"];
L25399: var FOUNDRY_PORTAL_URL = "https://ai.azure.com";
L25400: function azurePortalRgUrl(tenantId, subscriptionId, resourceGroup) {
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/cli.jsView on unpkg · L25384124try {
L125: const obj = JSON.parse(raw);
L126: if (!obj || typeof obj.repo !== "string" || obj.repo.length === 0)
...
L240: // ../../packages/github-app-auth/dist/esm/jwt.js
L241: import { createSign, createPrivateKey } from "crypto";
L242: function signAppJwt(args) {
...
L253: sign.update(unsigned);
L254: sign.end();
L255: const signature = sign.sign(createPrivateKey(args.privateKeyPem)).toString("base64url");
...
L349: const appJwt = signAppJwt({ appId, privateKeyPem });
L350: const url = `https://api.github.com/app/installations/${args.installationId}/access_tokens`;
L351: const repoName = args.repository.includes("/") ? args.repository.split("/", 2)[1] : args.repository;
Findings
4 High3 Medium5 Low
HighChild Processdist/cli.js
HighShell
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @m8t-stack/cli@0.2.63.
See all versions of @m8t-stack/cli for other recorded verdicts.
- Review the evidence and your use of @m8t-stack/cli@0.2.63 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.