registry / @openbrt/weclawbotctl / 0.1.24

@openbrt/weclawbotctl@0.1.24

WeClawBot pairing and screen-control CLI for local AI agents.

AI Security Review

scanned 4d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked WeClawBot pairing/control CLI that stores local MQTT credentials and publishes device control messages after explicit commands.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs weclawbotctl bind/status/doctor/export/unbind/screen/preview/clear/thinking/idle or imports exported libs.

Impact

User-selected WeClawBot pairing and screen/activity control; no install-time execution or stealth exfiltration found.

Mechanism

explicit CLI credential storage and MQTT device control

Rationale

Static inspection shows suspicious primitives are tied to the documented CLI purpose: pairing, local credential management, preview file generation, and MQTT publishing to a user-paired device. There is no lifecycle hook, hidden import-time execution, broad agent configuration mutation, credential harvesting, or unconsented remote payload behavior.

Evidence

package.jsonbin/weclawbotctl.mjsbin/weclawbot-byoa-bind.mjslib/mqtt-control.mjsREADME.md~/.config/weclawbot/agent-mqtt.jsonuser-specified screen JSON pathsuser-specified export/preview output pathspreview spool directory from WECLAWBOT_PREVIEW_SPOOL_DIR or OS temp

Network endpoints2

weclawbot.link/byoawss:// URLs supplied by paired MQTT credentials

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for block

bin/weclawbotctl.mjs can export stored MQTT password only when user passes --include-secret.
bin/weclawbotctl.mjs writes/removes ~/.config/weclawbot/agent-mqtt.json via explicit bind/unbind commands.

Evidence against

package.json has no preinstall/install/postinstall hooks; execution is only user-invoked CLI/imports.
Network use is package-aligned: bind POSTs to https://weclawbot.link/byoa and MQTT uses wss:// URL from paired credentials.
bin/weclawbot-byoa-bind.mjs only spawns node to run the local weclawbotctl bind command with inherited stdio.
No code writes AI-agent configs, persistence hooks, or foreign control surfaces.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 43.5 KB of source, external domains: weclawbot.link

Source & flagged code

4 flagged

bin/weclawbotctl.mjsView file

Lines 160-209javascript

160}

161

162async function commandExport(values) {

163 const options = parseOptions(values, {

164 credentials: credentialsPath(),

165 format: "env",

166 output: "",

167 "include-secret": false,

168 });

169 const payload = await requireCredentials(expandPath(options.credentials));

170 const config = normalizeCredentials(payload);

171 const includeSecret = Boolean(options["include-secret"]);

172 let body = "";

173 if (options.format === "json") {

174 body = `${JSON.stringify(maskedExport(payload, includeSecret), null, 2)}\n`;

175 } else if (options.format === "env") {

176 body = [

177 `WEC_MQTT_URL=${shellValue(config.url)}`,

178 `WEC_MQTT_CLIENT_ID=${shellValue(config.clientId)}`,

179 `WEC_MQTT_USERNAME=${shellValue(config.username)}`,

180 `WEC_MQTT_PASSWORD=${shellValue(includeSecret ? config.password : "********")}`,

Medium

Secret Pattern

Package contains a possible secret pattern.

bin/weclawbotctl.mjsView on unpkg · L180

181 `WEC_MQTT_CONTROL_TOPIC=${shellValue(config.controlTopic)}`,

182 "",

183 ].join("\n");

184 } else if (options.format === "mosquitto") {

185 body = [

186 `url ${config.url}`,

187 `id ${config.clientId}`,

188 `username ${config.username}`,

189 `password ${includeSecret ? config.password : "********"}`,

Medium

Secret Pattern

Hardcoded password in bin/weclawbotctl.mjs

bin/weclawbotctl.mjsView on unpkg · L189

190 "protocol-version mqttv5",

191 "clean-session true",

192 "",

193 ].join("\n");

194 } else {

195 throw new Error("export format must be env, json, or mosquitto");

196 }

197 if (options.output) {

198 const file = expandPath(options.output);

199 await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });

200 await fs.writeFile(file, body, { mode: includeSecret ? 0o600 : 0o644 });

201 if (includeSecret) await fs.chmod(file, 0o600);

202 console.log(`Wrote ${options.format} profile to ${file}.`);

203 } else {

204 process.stdout.write(body);

205 }

206}

207

208async function commandUnbind(values) {

209 const options = parseOptions(values, { credentials: credentialsPath(), yes: false });

Lines 446-497javascript

446 return null;

447 }

448}

449

450async function requireCredentials(file) {

451 const payload = await readCredentials(file);

452 if (!payload) throw new

Source & flagged code

4 flagged · loading source

bin/weclawbotctl.mjsView file

180patternName = generic_password severity = medium line = 180 matchedText = `WEC_MQT...)}`,

Medium

Secret Pattern

Package contains a possible secret pattern.

bin/weclawbotctl.mjsView on unpkg · L180

189patternName = generic_password severity = medium line = 189 matchedText = `passwor..."}`,

Medium

Secret Pattern

Hardcoded password in bin/weclawbotctl.mjs

bin/weclawbotctl.mjsView on unpkg · L189

466patternName = generic_password severity = medium line = 466 matchedText = password...**",

Medium

Secret Pattern

Hardcoded password in bin/weclawbotctl.mjs

bin/weclawbotctl.mjsView on unpkg · L466

477patternName = generic_password severity = medium line = 477 matchedText = if (!inc...**";

Medium

Secret Pattern

Hardcoded password in bin/weclawbotctl.mjs

bin/weclawbotctl.mjsView on unpkg · L477

Findings

6 Medium4 Low

MediumSecret Patternbin/weclawbotctl.mjs

MediumNetwork

MediumEnvironment Vars

MediumSecret Patternbin/weclawbotctl.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

bin/weclawbotctl.mjsView file

Lines 160-209javascript

160}

161

162async function commandExport(values) {

163 const options = parseOptions(values, {

164 credentials: credentialsPath(),

165 format: "env",

166 output: "",

167 "include-secret": false,

168 });

169 const payload = await requireCredentials(expandPath(options.credentials));

170 const config = normalizeCredentials(payload);

171 const includeSecret = Boolean(options["include-secret"]);

172 let body = "";

173 if (options.format === "json") {

174 body = `${JSON.stringify(maskedExport(payload, includeSecret), null, 2)}\n`;

175 } else if (options.format === "env") {

176 body = [

177 `WEC_MQTT_URL=${shellValue(config.url)}`,

178 `WEC_MQTT_CLIENT_ID=${shellValue(config.clientId)}`,

179 `WEC_MQTT_USERNAME=${shellValue(config.username)}`,

180 `WEC_MQTT_PASSWORD=${shellValue(includeSecret ? config.password : "********")}`,

Medium

Secret Pattern

Package contains a possible secret pattern.

bin/weclawbotctl.mjsView on unpkg · L180

181 `WEC_MQTT_CONTROL_TOPIC=${shellValue(config.controlTopic)}`,

182 "",

183 ].join("\n");

184 } else if (options.format === "mosquitto") {

185 body = [

186 `url ${config.url}`,

187 `id ${config.clientId}`,

188 `username ${config.username}`,

189 `password ${includeSecret ? config.password : "********"}`,

Medium

Secret Pattern

Hardcoded password in bin/weclawbotctl.mjs

bin/weclawbotctl.mjsView on unpkg · L189

190 "protocol-version mqttv5",

191 "clean-session true",

192 "",

193 ].join("\n");

194 } else {

195 throw new Error("export format must be env, json, or mosquitto");

196 }

197 if (options.output) {

198 const file = expandPath(options.output);

199 await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });

200 await fs.writeFile(file, body, { mode: includeSecret ? 0o600 : 0o644 });

201 if (includeSecret) await fs.chmod(file, 0o600);

202 console.log(`Wrote ${options.format} profile to ${file}.`);

203 } else {

204 process.stdout.write(body);

205 }

206}

207

208async function commandUnbind(values) {

209 const options = parseOptions(values, { credentials: credentialsPath(), yes: false });

Lines 446-497javascript

446 return null;

447 }

448}

449

450async function requireCredentials(file) {

451 const payload = await readCredentials(file);

452 if (!payload) throw new