registry / @ninemind/agentgem / 0.4.0

@ninemind/agentgem@0.4.0

A local web UI that introspects your coding-agent config, redacts secrets at capture, and builds a portable, composable Gem.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 101 file(s), 3.50 MB of source, external domains: 127.0.0.1, agentgem.ai, api.agentgem.ai, api.github.com, app.agentgem.ai, developer.mozilla.org, github.com, schema.agentcore.aws.dev, set-public-url.invalid, skills.sh, stackoverflow.com, vercel.com, www.apple.com

Source & flagged code

7 flagged

dist/goldmine/mcpServer.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

2import { createRequire as __cr } from 'module';import { fileURLToPath as __f } from 'url';import { dirname as __d } from 'path';const require = __cr

Source & flagged code

7 flagged · loading source

dist/goldmine/mcpServer.jsView file

10029// packages/base/dist/acpSession.js L10030: import { spawn } from "node:child_process"; L10031: import { mkdirSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/goldmine/mcpServer.jsView on unpkg · L10029

1Cross-file remote execution chain: dist/goldmine/mcpServer.js spawns dist/index.js; helper contains network access plus dynamic code execution. L1: #!/usr/bin/env node L2: import { createRequire as __cr } from 'module';import { fileURLToPath as __f } from 'url';import { dirname as __d } from 'path';const require = __cr(import.meta.url);const __filena... L3: var __create = Object.create; ... L2685: if (typeof node_buffer.Buffer === "function") { L2686: return node_buffer.Buffer.from(src, "base64"); L2687: } else if (typeof atob === "function") { ... L5362: yield* this.next(token); L5363: yield* this.end(forceDoc, endOffset); L5364: } ... L5366: *next(token) { L5367: if (node_process.env.LOG_STREAM) L5368: console.dir(token, { depth: null });

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/goldmine/mcpServer.jsView on unpkg · L1

dist/pickFolder.jsView file

16return { L17: cmd: "powershell", L18: args: [

High

Shell

Package source references shell execution.

dist/pickFolder.jsView on unpkg · L16

dist/index.jsView file

8627const port = Number(process.env.PORT ?? 41241); L8628: const baseUrl = process.env.PUBLIC_URL ?? \`http://localhost:\${port}\`; L8629: const API_KEY = process.env.A2A_API_KEY; // when set, require \`Authorization: Bearer <key>\` on the RPC/REST routes ... L8865: try { L8866: writeFileSync(file, JSON.stringify(kf), { mode: 384, flag: "wx" }); L8867: } catch (we) { ... L11042: // packages/base/dist/acpSession.js L11043: import { spawn } from "node:child_process"; L11044: import { mkdirSync as mkdirSync6 } from "node:fs";

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L8627

1997"use strict"; L1998: var node_process = __require("process"); L1999: function debug3(logLevel, ...messages) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1997

1import { createRequire as __cr } from 'module';import { fileURLToPath as __f } from 'url';import { dirname as __d } from 'path';const require = __cr(import.meta.url);const __filena... L2: var __create = Object.create; ... L82: const envComment = `// Reads ${spec.secrets.join(", ")} from the environment (set them as project env vars). L83: // See https://vercel.com/docs/eve/concepts#channels L84: `; ... L112: twilio: { platform: "twilio", label: "Twilio", eveImport: "eve/channels/twilio", factory: "twilioChannel", secrets: ["TWILIO_ACCOUNT_SID", "TWILIO_AUTH_TOKEN"] }, L113: github: { platform: "github", label: "GitHub", eveImport: "eve/channels/github", factory: "githubChannel", secrets: ["GITHUB_APP_ID", "GITHUB_APP_PRIVATE_KEY", "GITHUB_WEBHOOK_SECR... L114: }; ... L280: const upstream = new Client({ name: "agentgem-proxy", version: "1.0.0" }, { capabilities: {} }); L281: await upstream.connect(new StdioClientTransport({ command: ${JSON.stringify(command)}, args: ${JSON.stringify(args)}, env: process.env })); L282: ... L294: const app = express();

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

dist/warm/service.jsView file

15const LABEL = "ai.ninemind.agentgem.warm"; L16: export function launchdPlist(execArgs, label = LABEL) { L17: const args = execArgs.map((a) => ` <string>${a}</string>`).join("\n"); ... L53: render: (e) => launchdPlist(e), L54: loadCmd: `launchctl load ${join(home, "Library", "LaunchAgents", `${LABEL}.plist`)}`, L55: }; ... L63: export function installService(deps = {}) { L64: const platform = deps.platform ?? process.platform; L65: const home = deps.home ?? homedir(); L66: const exec = deps.exec ?? defaultExec();

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/warm/service.jsView on unpkg · L15

Findings

4 High5 Medium6 Low

HighChild Processdist/goldmine/mcpServer.js

HighShelldist/pickFolder.js

HighRemote Agent Bridgedist/index.js

HighCross File Remote Execution Contextdist/goldmine/mcpServer.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/warm/service.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 10009-10049javascript

10009 return {

10010 type: "mcp_server",

10011 name,

10012 transport: url ? "http" : "stdio",

10013 config: url ? { url: redactUrl(url) } : { command: cfg.command, args: redactArgs(cfg.args) }

10014 };

10015}

10016__name(classifyMcpServer, "classifyMcpServer");

10017

10018// packages/model/dist/secretPatterns.js

10019var REDACTED = "<redacted>";

10020var PEM_RE = /-----BEGIN[A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END[A-Z0-9 ]*PRIVATE KEY-----/g;

10021var JWT_RE = /\beyJ[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{4,}\.[A-Za-z0-9_-]{4,}\b/g;

10022var PROVIDER_TOKEN_RE = /\b(?:github_pat_|ghp_|gho_|ghu_|ghs_|glpat-|xox[a-z]-)[A-Za-z0-9_-]{8,}|\bAKIA[0-9A-Z]{16}\b|\bASIA[0-9A-Z]{16}\b/g;

10023var URL_CRED_RE = /([a-zA-Z][a-zA-Z0-9+.-]*:\/\/[^/\s:@]+:)([^/\s:@]+)(@)/g;

10024function redactStrongCredentials(s) {

10025 return s.replace(PEM_RE, REDACTED).replace(JWT_RE, REDACTED).replace(PROVIDER_TOKEN_RE, REDACTED).replace(URL_CRED_RE, (_m, prefix, _pw, at) => `${prefix}${REDACTED}${at}`);

10026}

10027__name(redactStrongCredentials, "redactStrongCredentials");

10028

10029// packages/base/dist/acpSession.js

10030import { spawn } from "node:child_process";

10031import { mkdirSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/goldmine/mcpServer.jsView on unpkg · L10029

10032import { Readable, Writable } from "node:stream";

10033

10034// node_modules/.pnpm/@agentback+common@0.7.1/node_modules/@agentback/common/dist/utils/debug-factory.js

10035var import_debug2 = __toESM(require_src(), 1);

10036

10037// node_modules/.pnpm/@agentback+common@0.7.1/node_modules/@agentback/common/dist/utils/debug.js

10038var import_debug = __toESM(require_src(), 1);

10039

10040// node_modules/.pnpm/@agentback+common@0.7.1/node_modules/@agentback/common/dist/utils/env.js

10041var EnvType;

10042(function(EnvType2) {

10043 EnvType2["PROD"] = "production";

10044 EnvType2["STAGING"] = "staging";

10045 EnvType2["QA"] = "qa";

10046 EnvType2["DEV"] = "dev";

10047 EnvType2["TEST"] = "test";

10048})(EnvType || (EnvType = {}));

10049function getEnvVar(name, defaultValue) {

dist/pickFolder.jsView file

Lines 1-36javascript

2// SPDX-License-Identifier: MIT

3// src/pickFolder.ts

4// Pop the OS-native folder chooser (agentgem runs locally, so the dialog appears on the

5// user's own screen) and return the chosen absolute path. The user explicitly selects the

6// folder — there is no server-side directory enumeration to scope or harden.

7import { execFile } from "node:child_process";

8import { platform } from "node:os";

9// Separated from the exec so it can be unit-tested without popping a dialog.

10export function pickFolderCommand(plat) {

11 if (plat === "darwin")

12 return { cmd: "osascript", args: ["-e", 'POSIX path of (choose folder with prompt "Choose project root")'] };

13 if (plat === "linux")

14 return { cmd: "zenity", args: ["--file-selection", "--directory", "--title=Choose project root"] };

15 if (plat === "win32")

16 return {

17 cmd: "powershell",

18 args: [

High

Shell

Package source references shell execution.

dist/pickFolder.jsView on unpkg · L16

19 "-NoProfile",

20 "-Command",

21 "Add-Type -AssemblyName System.Windows.Forms; $f=New-Object System.Windows.Forms.FolderBrowserDialog; if($f.ShowDialog() -eq 'OK'){ $f.SelectedPath }",

22 ],

23 };

24 return null;

25}

26export function pickFolder() {

27 const spec = pickFolderCommand(platform());

28 if (!spec)

29 return Promise.resolve(null);

30 return new Promise((resolve) => {

31 execFile(spec.cmd, spec.args, { timeout: 180000 }, (err, stdout) => {

32 if (err)

33 return resolve(null); // cancelled, or the dialog tool is unavailable

34 const p = (stdout || "").trim();

35 resolve(p || null);

36 });

dist/index.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L8627

1997"use strict"; L1998: var node_process = __require("process"); L1999: function debug3(logLevel, ...messages) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L1997

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

dist/warm/service.jsView file

Lines 1-35javascript

2// SPDX-License-Identifier: MIT

3// src/warm/service.ts

4//

5// OS-service install for the Trigger C daemon: pure unit generators + a

6// platform-dispatched install/uninstall. macOS launchd, Linux systemd-user.

7import { writeFileSync, unlinkSync, mkdirSync } from "node:fs";

8import { homedir } from "node:os";

9import { join, dirname } from "node:path";

10import { fileURLToPath } from "node:url";

11import { createLogger } from "@agentgem/base";

12const warmLog = createLogger("warm");

13export class UnsupportedPlatformError extends Error {

14}

15const LABEL = "ai.ninemind.agentgem.warm";

16export function launchdPlist(execArgs, label = LABEL) {

17 const args = execArgs.map((a) => ` <string>${a}</string>`).join("\n");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/warm/service.jsView on unpkg · L15

18 return `<?xml version="1.0" encoding="UTF-8"?>

19<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

20<plist version="1.0">

21<dict>

22 <key>Label</key><string>${label}</string>

23 <key>ProgramArguments</key>

24 <array>

25${args}

26 </array>

27 <key>RunAtLoad</key><true/>

28 <key>KeepAlive</key><true/>

29</dict>

30</plist>

31`;

32}

33export function systemdUnit(execArgs) {

34 return `[Unit]

35Description=AgentGem warming daemon