registry / @opentf/web-docs / 0.3.0

@opentf/web-docs@0.3.0

Documentation-site generator for OTF Web — themed shell components (sidebar, TOC, callouts, tabs), a build-time nav generator, and a default light/dark theme.

AI Security Review

scanned 17h ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The risky primitives are docs-generator aligned: local content reads, git metadata lookup, Pagefind indexing, and site-local runtime search loading.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User imports components or explicitly runs the docs build integration through @opentf/web tooling.

Impact

Build may read project docs/pages and write a local Pagefind search index; no exfiltration or persistence observed.

Mechanism

benign documentation-site generation and UI components

Rationale

Static source inspection shows a documentation package with build-time filesystem scanning and git metadata helpers, but no install-time execution, credential access, external network exfiltration, persistence, destructive behavior, or AI-agent control-surface mutation. Scanner hits are explained by package-aligned dynamic imports, local file reads, and BOM-tolerant frontmatter regexes.

Evidence

package.jsonindex.jsbuild/index.jsbuild/frontmatter.jsbuild/docs-nav-plugin.jsbuild/last-updated.jsbuild/last-updated-plugin.jsbuild/pagefind.jscomponents/Search.jsxapp/* page and _meta files read by build pluginsdist/**/*.html read by Pagefind indexingdist/pagefind written by Pagefind indexing

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

build/last-updated.js and build/last-updated-plugin.js invoke git via execFileSync during docs build metadata generation.
build/docs-nav-plugin.js dynamically imports user project _meta.js files during build, an expected config-loading path.
components/Search.jsx dynamically imports /pagefind/pagefind.js at runtime for site-local search.

Evidence against

package.json has no preinstall/install/postinstall hooks and only a test script.
build/frontmatter.js only reads local markdown frontmatter; the flagged invisible character is a BOM-tolerant regex marker, not bidi control flow hiding.
No credential, env, npm token, SSH, home-directory, or agent config harvesting found by source grep.
No exfiltration endpoints or outbound network APIs found in package source.
build/pagefind.js reads built HTML and writes a static dist/pagefind index for package-aligned search.
Entrypoints index.js and build/index.js only re-export components/build helpers.

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 45 file(s), 92.7 KB of source, external domains: www.w3.org

Source & flagged code

3 flagged

components/Search.jsxView file

Lines 1-36jsx

1// Pagefind-backed search modal (Phase 2). The navbar's `SearchTrigger` and the global

2// ⌘K / Ctrl+K shortcut open it via `window.__otfwOpenSearch`, which this component

3// installs on mount. The static index is generated at build time (`otfw build --ssg`

4// with `docs.search.provider === "pagefind"`) and lives at `/pagefind/`; we load its

5// runtime on first open so pages without a search never pay for it.

6//

7// Note: results only exist against a built site (`dist/`). In dev there is no index,

8// so the modal opens but reports no results — expected.

9import { onMount, router, RawHtml, Portal } from "@opentf/web";

11let pagefindPromise = null;

12function loadPagefind() {

13 if (!pagefindPromise) {

14 // A non-literal specifier keeps the bundler from trying to resolve the index at

15 // build time (it doesn't exist yet) — it stays a runtime import of the static file.

16 const path = "/pagefind/pagefind.js";

17 pagefindPromise = import(/* @vite-ignore */ path).then(async (pf) => {

18 await pf.init?.();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

components/Search.jsxView on unpkg · L16

19 return pf;

20 });

21 }

22 return pagefindPromise;

23}

25export default function Search() {

26 let open = $state(false);

27 let query = $state("");

28 let results = $state([]);

29 let active = $state(0);

30 let loading = $state(false);

31 const inputRef = $ref();

33 let timer;

34 let token = 0;

36 async function runSearch(q) {

build/frontmatter.jsView file

Lines 1-38javascript

1// Minimal YAML frontmatter reader for the nav generator.

2//

3// Mirrors the flat-scalar parser in the Rust MDX front-end

4// (crates/otfw_compiler/src/mdx.rs `frontmatter_object`): a leading `---` block of

5// `key: value` lines, scalars only. Booleans/numbers are coerced; everything else is

6// a string. Nested maps / lists are out of scope (a follow-up, same as the Rust side).

8import { readFileSync } from "node:fs";

10/** Parse the leading frontmatter block of an .mdx/.md file into a flat object. */

Source & flagged code

3 flagged · loading source

components/Search.jsxView file

16const path = "/pagefind/pagefind.js"; L17: pagefindPromise = import(/* @vite-ignore */ path).then(async (pf) => { L18: await pf.init?.();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

components/Search.jsxView on unpkg · L16

build/frontmatter.jsView file

18contains invisible/control Unicode U+FEFF (zero width no-break space) const m = source.match(/^<U+FEFF>?---\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

build/frontmatter.jsView on unpkg · L18

•Trigger-reachable chain: manifest.exports -> build/index.js -> build/blog-posts-plugin.js -> build/frontmatter.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

build/frontmatter.jsView on unpkg

Findings

2 Critical2 Medium4 Low

CriticalTrojan Source Unicodebuild/frontmatter.js

CriticalTrigger Reachable Dangerous Capabilitybuild/frontmatter.js

MediumDynamic Requirecomponents/Search.jsx

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

components/Search.jsxView file

Lines 1-36jsx

1// Pagefind-backed search modal (Phase 2). The navbar's `SearchTrigger` and the global

2// ⌘K / Ctrl+K shortcut open it via `window.__otfwOpenSearch`, which this component

3// installs on mount. The static index is generated at build time (`otfw build --ssg`

4// with `docs.search.provider === "pagefind"`) and lives at `/pagefind/`; we load its

5// runtime on first open so pages without a search never pay for it.

6//

7// Note: results only exist against a built site (`dist/`). In dev there is no index,

8// so the modal opens but reports no results — expected.

9import { onMount, router, RawHtml, Portal } from "@opentf/web";

11let pagefindPromise = null;

12function loadPagefind() {

13 if (!pagefindPromise) {

14 // A non-literal specifier keeps the bundler from trying to resolve the index at

15 // build time (it doesn't exist yet) — it stays a runtime import of the static file.

16 const path = "/pagefind/pagefind.js";

17 pagefindPromise = import(/* @vite-ignore */ path).then(async (pf) => {

18 await pf.init?.();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

components/Search.jsxView on unpkg · L16

19 return pf;

20 });

21 }

22 return pagefindPromise;

23}

25export default function Search() {

26 let open = $state(false);

27 let query = $state("");

28 let results = $state([]);

29 let active = $state(0);

30 let loading = $state(false);

31 const inputRef = $ref();

33 let timer;

34 let token = 0;

36 async function runSearch(q) {

build/frontmatter.jsView file

Lines 1-38javascript

1// Minimal YAML frontmatter reader for the nav generator.

2//

3// Mirrors the flat-scalar parser in the Rust MDX front-end

4// (crates/otfw_compiler/src/mdx.rs `frontmatter_object`): a leading `---` block of

5// `key: value` lines, scalars only. Booleans/numbers are coerced; everything else is

6// a string. Nested maps / lists are out of scope (a follow-up, same as the Rust side).

8import { readFileSync } from "node:fs";

10/** Parse the leading frontmatter block of an .mdx/.md file into a flat object. */