registry  /  @mondaydotcomorg/agent-toolkit  /  5.47.0

@mondaydotcomorg/agent-toolkit@5.47.0

monday.com agent toolkit

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
CryptoEnvironmentVarsNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 6 file(s), 5.47 MB of source, external domains: api.monday.com, commonmark.org, en.wikipedia.org, forms.monday.com, monday-apps-ms.monday.com, monday.com, track.bigbrain.me, wkf.ms, yarnpkg.com

Source & flagged code

6 flagged · loading source
dist/esm/core/index.jsView file
1037patternName = generic_password severity = medium line = 1037 matchedText = `,cl={qu...=Nd`
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/esm/core/index.jsView on unpkg · L1037
dist/esm/mcp/index.jsView file
1038patternName = generic_password severity = medium line = 1038 matchedText = `,$h={qu...=zm`
Medium
Secret Pattern

Hardcoded password in dist/esm/mcp/index.js

dist/esm/mcp/index.jsView on unpkg · L1038
dist/esm/openai/index.jsView file
1037patternName = generic_password severity = medium line = 1037 matchedText = `,ul={qu...=Od`
Medium
Secret Pattern

Hardcoded password in dist/esm/openai/index.js

dist/esm/openai/index.jsView on unpkg · L1037
dist/cjs/core/index.jsView file
1037patternName = generic_password severity = medium line = 1037 matchedText = `,wl={qu...=Fd`
Medium
Secret Pattern

Hardcoded password in dist/cjs/core/index.js

dist/cjs/core/index.jsView on unpkg · L1037
dist/cjs/mcp/index.jsView file
1038patternName = generic_password severity = medium line = 1038 matchedText = `,qh={qu...=ru`
Medium
Secret Pattern

Hardcoded password in dist/cjs/mcp/index.js

dist/cjs/mcp/index.jsView on unpkg · L1038
dist/cjs/openai/index.jsView file
1037patternName = generic_password severity = medium line = 1037 matchedText = `,El={qu...=Ms`
Medium
Secret Pattern

Hardcoded password in dist/cjs/openai/index.js

dist/cjs/openai/index.jsView on unpkg · L1037

Findings

8 Medium3 Low
MediumSecret Patterndist/esm/core/index.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterndist/esm/mcp/index.js
MediumSecret Patterndist/esm/openai/index.js
MediumSecret Patterndist/cjs/core/index.js
MediumSecret Patterndist/cjs/mcp/index.js
MediumSecret Patterndist/cjs/openai/index.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings