registry  /  @mondaydotcomorg/agent-toolkit  /  5.57.0

@mondaydotcomorg/agent-toolkit@5.57.0

monday.com agent toolkit

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
CryptoEnvironmentVarsNetwork
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 6 file(s), 5.51 MB of source, external domains: api.monday.com, commonmark.org, en.wikipedia.org, forms.monday.com, monday-apps-ms.monday.com, monday.com, track.bigbrain.me, wkf.ms, yarnpkg.com

Source & flagged code

6 flagged · loading source
dist/esm/core/index.jsView file
1049patternName = generic_password severity = medium line = 1049 matchedText = `,bl={qu...=Nd`
Medium
Secret Pattern

Package contains a possible secret pattern.

dist/esm/core/index.jsView on unpkg · L1049
dist/esm/mcp/index.jsView file
1050patternName = generic_password severity = medium line = 1050 matchedText = `,jh={qu...=zm`
Medium
Secret Pattern

Hardcoded password in dist/esm/mcp/index.js

dist/esm/mcp/index.jsView on unpkg · L1050
dist/esm/openai/index.jsView file
1049patternName = generic_password severity = medium line = 1049 matchedText = `,vl={qu...=Od`
Medium
Secret Pattern

Hardcoded password in dist/esm/openai/index.js

dist/esm/openai/index.jsView on unpkg · L1049
dist/cjs/core/index.jsView file
1049patternName = generic_password severity = medium line = 1049 matchedText = `,Ol={qu...=Fd`
Medium
Secret Pattern

Hardcoded password in dist/cjs/core/index.js

dist/cjs/core/index.jsView on unpkg · L1049
dist/cjs/mcp/index.jsView file
1050patternName = generic_password severity = medium line = 1050 matchedText = `,Jh={qu...=ru`
Medium
Secret Pattern

Hardcoded password in dist/cjs/mcp/index.js

dist/cjs/mcp/index.jsView on unpkg · L1050
dist/cjs/openai/index.jsView file
1049patternName = generic_password severity = medium line = 1049 matchedText = `,kl={qu...=Vd`
Medium
Secret Pattern

Hardcoded password in dist/cjs/openai/index.js

dist/cjs/openai/index.jsView on unpkg · L1049

Findings

8 Medium3 Low
MediumSecret Patterndist/esm/core/index.js
MediumNetwork
MediumEnvironment Vars
MediumSecret Patterndist/esm/mcp/index.js
MediumSecret Patterndist/esm/openai/index.js
MediumSecret Patterndist/cjs/core/index.js
MediumSecret Patterndist/cjs/mcp/index.js
MediumSecret Patterndist/cjs/openai/index.js
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings