registry / @nimbus-dev/sdk / 1.3.0

@nimbus-dev/sdk@1.3.0

MIT-licensed SDK for authoring Nimbus Model Context Protocol (MCP) connectors. This library provides TypeScript types, base classes, and request-routing primitives to build connectors that run on the Nimbus Gateway.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface. Network, filesystem, and process primitives are explicit SDK/helper calls rather than install- or import-time behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

Explicit caller invocation of OAuth token minting or sandbox contract testing.

Impact

No automatic credential harvesting, exfiltration, persistence, destructive action, or AI-agent control-surface mutation found.

Mechanism

Caller-directed OAuth exchange and sandbox permission probes.

Rationale

The static alerts map to legitimate, explicitly invoked SDK features: JWT/OAuth signing and sandbox contract probes. Source inspection found no lifecycle execution, hidden payload, credential collection, foreign agent configuration mutation, or unauthorized network destination.

Evidence

package.jsondist/index.jsdist/crypto/jwt.d.tssrc/crypto/service-account-token.tssrc/testing/sandbox-contract.tssrc/testing/sandbox-probe.ts

Network endpoints2

oauth2.googleapis.com/token192.0.2.1

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has only prepublishOnly; no install-time lifecycle hook or bin.
dist/index.js only re-exports SDK modules; importing it has no top-level I/O.
src/crypto/service-account-token.ts posts a caller-supplied service-account assertion to its token URI.
src/testing/sandbox-contract.ts reads a caller path and spawns only its bundled probe on explicit invocation.
src/testing/sandbox-probe.ts performs sandbox-negative network/filesystem checks only when launched by that test helper.
dist/crypto/jwt.d.ts describes a private-key argument; it contains no embedded secret.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 67 file(s), 236 KB of source, external domains: 192.0.2.1, api.fastmail.com, evil.example.com, example.com, oauth2.googleapis.com, www.googleapis.com, x.com

Source & flagged code

6 flagged

dist/crypto/jwt.d.tsView file

Lines 1-30typescript

1/**

2 * Compact JWS (JWT) signing primitive shared by connector auth flows.

3 *

4 * A first-party connector that authenticates with a signed JWT must sign in

5 * TWO places that cannot import each other across the package boundary — the

6 * gateway-side sync handler and the connector's own MCP server. Hosting the

7 * signer here (the SDK, which both may import) keeps a single source of truth.

8 *

9 * Uses `node:crypto` only — no runtime dependency, so the SDK stays dep-free.

10 */

11/** base64url-encode the JSON serialization of `value` (a JWT header/payload). */

12export declare function base64UrlJson(value: unknown): string;

13export interface SignJwtOptions {

14 readonly header: Record<string, unknown>;

15 readonly payload: Record<string, unknown>;

16 /** Full PEM text of the signing private key (`-----BEGIN PRIVATE KEY----- …`). */

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/crypto/jwt.d.tsView on unpkg · L16

Critical

Secret Pattern

RSA private key in dist/crypto/jwt.d.ts

dist/crypto/jwt.d.tsView on unpkg · L16

17 readonly privateKeyPem: string;

18 /**

19 * ECDSA (e.g. ES256) requires `"ieee-p1363"` — the raw `r||s` encoding JWS

20 * mandates. Omit for RSA (e.g. RS256), which uses PKCS#1 v1.5 / DER.

21 */

22 readonly dsaEncoding?: "ieee-p1363" | "der";

23}

24/**

25 * Sign a compact JWS — `base64url(header).base64url(payload).base64url(sig)` —

26 * over SHA-256. The digest name is passed explicitly ("sha256") rather than

27 * `null` so the signer works on Bun's BoringSSL, which has no default digest.

28 */

29export declare function signJwt(opts: SignJwtOptions): string;

30//# sourceMappingURL=jwt.d.ts.map

dist/crypto/app-store-connect-jwt.d.tsView file

Lines 1-19typescript

1/**

2 * Apple App Store Connect API authentication — a short-lived ES256 JWT.

3 *

4 * The App Store Connect API authenticates with a JWT bearer token minted from

5 * the developer's EC P-256 `.p8` private key (Apple caps the lifetime at 20

6 * min). Shared so the gateway sync and a connector's MCP server sign

7 * identically without duplicating the flow.

8 *

9 * See: https://developer.apple.com/documentation/appstoreconnectapi/generating-tokens-for-api-requests

10 */

11export

src/crypto/jwt.tsView file

Lines 2-42typescript

2 * Compact JWS (JWT) signing primitive shared by connector auth flows.

3 *

4 * A first-party connector that authenticates with a signed JWT must sign in

5 * TWO places that cannot import each other across the package boundary — the

6 * gateway-side sync handler and the connector

src/crypto/app-store-connect-jwt.tsView file

Lines 1-37typescript

1/**

2 * Apple App Store Connect API authentication — a short-lived ES256 JWT.

3 *

4 * The App Store Connect API authenticates with a JWT bearer token minted from

5 * the developer's EC P-256 `.p8` private key (Apple caps the lifetime at 20

6 * min). Shared so the gateway sync and a connector's MCP server sign

7 * identically without duplicating the flow.

8 *

9 * See: https://developer.apple.com/documentation/appstoreconnectapi/generating-tokens-for-api-requests

10 */

src/data-profile/data-profile.test.tsView file

Lines 102-142typescript

102 { name: "id", type: "number" },

103 { name: "name", type: "string" },

104 { name: "active", type: "boolean" },

105 { name: "score", type

Source & flagged code

6 flagged · loading source

dist/crypto/jwt.d.tsView file

16patternName = private_key_rsa severity = critical line = 16 matchedText = /** Full.... */

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/crypto/jwt.d.tsView on unpkg · L16

16patternName = private_key_rsa severity = critical line = 16 matchedText = /** Full.... */

Critical

Secret Pattern

RSA private key in dist/crypto/jwt.d.ts

dist/crypto/jwt.d.tsView on unpkg · L16

dist/crypto/app-store-connect-jwt.d.tsView file

14patternName = private_key_rsa severity = critical line = 14 matchedText = /** Full.... */

Critical

Secret Pattern

RSA private key in dist/crypto/app-store-connect-jwt.d.ts

dist/crypto/app-store-connect-jwt.d.tsView on unpkg · L14

src/crypto/jwt.tsView file

22patternName = private_key_rsa severity = critical line = 22 matchedText = /** Full.... */

Critical

Secret Pattern

RSA private key in src/crypto/jwt.ts

src/crypto/jwt.tsView on unpkg · L22

src/crypto/app-store-connect-jwt.tsView file

17patternName = private_key_rsa severity = critical line = 17 matchedText = /** Full.... */

Critical

Secret Pattern

RSA private key in src/crypto/app-store-connect-jwt.ts

src/crypto/app-store-connect-jwt.tsView on unpkg · L17

src/data-profile/data-profile.test.tsView file

122patternName = generic_password severity = medium line = 122 matchedText = const li... });

Medium

Secret Pattern

Hardcoded password in src/data-profile/data-profile.test.ts

src/data-profile/data-profile.test.tsView on unpkg · L122

Findings

5 Critical3 Medium5 Low

CriticalCritical Secretdist/crypto/jwt.d.ts

CriticalSecret Patterndist/crypto/jwt.d.ts

CriticalSecret Patterndist/crypto/app-store-connect-jwt.d.ts

CriticalSecret Patternsrc/crypto/jwt.ts

CriticalSecret Patternsrc/crypto/app-store-connect-jwt.ts

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternsrc/data-profile/data-profile.test.ts

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/crypto/jwt.d.tsView file

Lines 1-30typescript

1/**

2 * Compact JWS (JWT) signing primitive shared by connector auth flows.

3 *

4 * A first-party connector that authenticates with a signed JWT must sign in

5 * TWO places that cannot import each other across the package boundary — the

6 * gateway-side sync handler and the connector's own MCP server. Hosting the

7 * signer here (the SDK, which both may import) keeps a single source of truth.

8 *

9 * Uses `node:crypto` only — no runtime dependency, so the SDK stays dep-free.

10 */

11/** base64url-encode the JSON serialization of `value` (a JWT header/payload). */

12export declare function base64UrlJson(value: unknown): string;

13export interface SignJwtOptions {

14 readonly header: Record<string, unknown>;

15 readonly payload: Record<string, unknown>;

16 /** Full PEM text of the signing private key (`-----BEGIN PRIVATE KEY----- …`). */

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/crypto/jwt.d.tsView on unpkg · L16

Critical

Secret Pattern

RSA private key in dist/crypto/jwt.d.ts

dist/crypto/jwt.d.tsView on unpkg · L16

17 readonly privateKeyPem: string;

18 /**

19 * ECDSA (e.g. ES256) requires `"ieee-p1363"` — the raw `r||s` encoding JWS

20 * mandates. Omit for RSA (e.g. RS256), which uses PKCS#1 v1.5 / DER.

21 */

22 readonly dsaEncoding?: "ieee-p1363" | "der";

23}

24/**

25 * Sign a compact JWS — `base64url(header).base64url(payload).base64url(sig)` —

26 * over SHA-256. The digest name is passed explicitly ("sha256") rather than

27 * `null` so the signer works on Bun's BoringSSL, which has no default digest.

28 */

29export declare function signJwt(opts: SignJwtOptions): string;

30//# sourceMappingURL=jwt.d.ts.map

dist/crypto/app-store-connect-jwt.d.tsView file

Lines 1-19typescript

1/**

2 * Apple App Store Connect API authentication — a short-lived ES256 JWT.

3 *

4 * The App Store Connect API authenticates with a JWT bearer token minted from

5 * the developer's EC P-256 `.p8` private key (Apple caps the lifetime at 20

6 * min). Shared so the gateway sync and a connector's MCP server sign

7 * identically without duplicating the flow.

8 *

9 * See: https://developer.apple.com/documentation/appstoreconnectapi/generating-tokens-for-api-requests

10 */

11export

src/crypto/jwt.tsView file

Lines 2-42typescript

2 * Compact JWS (JWT) signing primitive shared by connector auth flows.

3 *

4 * A first-party connector that authenticates with a signed JWT must sign in

5 * TWO places that cannot import each other across the package boundary — the

6 * gateway-side sync handler and the connector

src/crypto/app-store-connect-jwt.tsView file

Lines 1-37typescript

1/**

2 * Apple App Store Connect API authentication — a short-lived ES256 JWT.

3 *

4 * The App Store Connect API authenticates with a JWT bearer token minted from

5 * the developer's EC P-256 `.p8` private key (Apple caps the lifetime at 20

6 * min). Shared so the gateway sync and a connector's MCP server sign

7 * identically without duplicating the flow.

8 *

9 * See: https://developer.apple.com/documentation/appstoreconnectapi/generating-tokens-for-api-requests

10 */

src/data-profile/data-profile.test.tsView file

Lines 102-142typescript

102 { name: "id", type: "number" },

103 { name: "name", type: "string" },

104 { name: "active", type: "boolean" },

105 { name: "score", type