registry / @openwop/openwop-conformance / 1.51.0

@openwop/openwop-conformance@1.51.0

Production-ready black-box conformance suite for OpenWOP v1.0 compliant servers.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 444 file(s), 2.57 MB of source, external domains: 10.0.0.5, 127.0.0.1, 169.254.169.254, api.example.com, api.github.com, api.githubcopilot.com, attacker.example, caller.example.com, evil.example, example.com, example.test, h.example, harness.example, host-a.example, host.example, json-schema.org, oauth.synthetic.openwop.test, openwop.dev, packs.openwop.dev, untrusted.example.invalid, vllm.internal, www.w3.org

Source & flagged code

7 flagged

dist/cli.jsView file

Lines 5-45javascript

5 *

6 * Wraps `vitest` with friendlier args + structured exit codes so it

7 * works as the `npm test` entry for downstream packages.

8 *

9 * Usage:

10 * openwop-conformance --base-url https://api.example.com --api-key hk_test_123

11 * openwop-conformance --offline # server-free subset only

12 * openwop-conformance --filter discovery # category filter

13 * openwop-conformance --base-url ... --api-key ... --filter "interrupt|cancellation"

14 * openwop-conformance --base-url ... --api-key ... --certify out.json # RFC 0089 bundle

15 *

16 * Environment variables override flags (per the conformance harness's

17 * existing convention):

18 * OPENWOP_BASE_URL, OPENWOP_API_KEY, OPENWOP_IMPLEMENTATION_NAME,

19 * OPENWOP_IMPLEMENTATION_VERSION, OPENWOP_LIFECYCLE_TIMEOUT_MS

20 *

21 * Exit codes:

22 * 0 all scenarios pass

23 * 1 one or more scenarios failed

24 * 2 suite couldn't start (missing required args, etc)

25 */

26import { spawnSync } from 'node:child_process';

27import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L25

28import { dirname, resolve as resolvePath, join } from 'node:path';

29import { createHash } from 'node:crypto';

30import { readFileSync, writeFileSync, mkdtempSync, rmSync } from 'node:fs';

31import { tmpdir } from 'node:os';

32import Ajv2020 from 'ajv/dist/2020.js';

33import addFormats from 'ajv-formats';

34import { SCHEMAS_DIR } from './lib/paths.js';

35import { deriveProfiles, isCoreStandard, agentPlatformStatus, } from './lib/profiles.js';

36function parseArgs(argv) {

37 let baseUrl;

38 let apiKey;

39 let offline = false;

40 let filter;

41 let help = false;

42 let impl;

43 let implVersion;

44 let certify;

45 for (let i = 0; i < argv.length; i++) {

Lines 360-393javascript

360 'Run `openwop-conformance --help` for usage.\n');

361 process.exit(2);

362 }

363 // Resolve the conformance directory relative to this script's location

364 // so the CLI works regardless of the caller's cwd. Both the source

365 // path (`src/cli.ts`) and the compiled path (`dist/cli.js`) live ONE

366 // directory below the package root, so the same `..` works either way.

367 const here = dirname

src/scenarios/idempotency-key-determinism.test.tsView file

Lines 81-121typescript

81 h.update('\0', 'utf8');

82 h.update(nodeId, 'utf8');

83 h.update('\0', 'utf8');

84 if (payload !== undefined && payload !==

src/scenarios/sandbox-mvp-behavior.test.tsView file

Lines 1-28typescript

1/**

2 * sandbox-mvp-behavior — RFC 0035 §B behavioral probes via the node:vm sandbox MVP.

3 *

4 * Companion to the 8 advertisement-shape `sandbox-*.test.ts` files. This

5 * file exercises the 5 RFC 0035 §B failure-mode invariants the

6 * node:vm-based reference MVP supports:

7 *

8 * 1. host-fs-escape — sandboxed code attempting `require('fs')` fails closed

9 * 2. host-env-leak — sandboxed code attempting `process.env` access fails closed

10 * 3. network-escape — sandboxed code attempting `require('http')` fails closed

src/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1View file

9* host can co-advertise "toolHooks.prePostEventshttpClient.safeFetch", L10: * pass the seam, and still ship a production `createSafeFetch()` with no audit L11: * hooks — the "quiet bypass" §host.http line "centralizing egress in the host ... L68: // toolReturned carries the forbidden status). cf. `http-client-ssrf-guard`. L69: const BLOCKED_URL = 'http://169.254.169.254/latest/meta-data/'; L70: // A public URL the guard SHOULD allow — best-effort coverage of the *success*

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1View on unpkg · L9

fixtures/wasm-sandbox/misbehaving-fs.wasmView file

•path = fixtures/wasm-sandbox/misbehaving-fs.wasm kind = payload_in_excluded_dir sizeBytes = 92 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

fixtures/wasm-sandbox/misbehaving-fs.wasmView on unpkg

•path = fixtures/wasm-sandbox/misbehaving-fs.wasm kind = wasm_module sizeBytes = 92 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

fixtures/wasm-sandbox/misbehaving-fs.wasmView on unpkg

Source & flagged code

7 flagged · loading source

dist/cli.jsView file

25*/ L26: import { spawnSync } from 'node:child_process'; L27: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L25

380} L381: const result = spawnSync('npx', ['vitest', ...vitestArgs], { L382: cwd: conformanceRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L380

src/scenarios/idempotency-key-determinism.test.tsView file

101if (!packAvailable) return; L102: const mod = (await import(PACK_PATH)) as { idempotencyKey?: IdempotencyKeyFn }; L103: if (typeof mod.idempotencyKey !== 'function') {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/scenarios/idempotency-key-determinism.test.tsView on unpkg · L101

src/scenarios/sandbox-mvp-behavior.test.tsView file

8* 1. host-fs-escape — sandboxed code attempting `require('fs')` fails closed L9: * 2. host-env-leak — sandboxed code attempting `process.env` access fails closed L10: * 3. network-escape — sandboxed code attempting `require('http')` fails closed L11: * 4. host-process-escape — sandboxed code attempting `require('child_process')` fails closed L12: * 5. sandbox-timeout — runaway loop terminated by the host's wallClockLimitMs

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/scenarios/sandbox-mvp-behavior.test.tsView on unpkg · L8

src/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1View file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1View on unpkg · L9

fixtures/wasm-sandbox/misbehaving-fs.wasmView file

•path = fixtures/wasm-sandbox/misbehaving-fs.wasm kind = payload_in_excluded_dir sizeBytes = 92 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

fixtures/wasm-sandbox/misbehaving-fs.wasmView on unpkg

•path = fixtures/wasm-sandbox/misbehaving-fs.wasm kind = wasm_module sizeBytes = 92 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

fixtures/wasm-sandbox/misbehaving-fs.wasmView on unpkg

Findings

6 High5 Medium4 Low

HighChild Processdist/cli.js

HighShell

HighSame File Env Network Executionsrc/scenarios/sandbox-mvp-behavior.test.ts

HighCloud Metadata Accesssrc/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1

HighRuntime Package Installdist/cli.js

HighPayload In Excluded Dirfixtures/wasm-sandbox/misbehaving-fs.wasm

MediumDynamic Requiresrc/scenarios/idempotency-key-determinism.test.ts

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Modulefixtures/wasm-sandbox/misbehaving-fs.wasm

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/cli.jsView file

Lines 5-45javascript

5 *

6 * Wraps `vitest` with friendlier args + structured exit codes so it

7 * works as the `npm test` entry for downstream packages.

8 *

9 * Usage:

10 * openwop-conformance --base-url https://api.example.com --api-key hk_test_123

11 * openwop-conformance --offline # server-free subset only

12 * openwop-conformance --filter discovery # category filter

13 * openwop-conformance --base-url ... --api-key ... --filter "interrupt|cancellation"

14 * openwop-conformance --base-url ... --api-key ... --certify out.json # RFC 0089 bundle

15 *

16 * Environment variables override flags (per the conformance harness's

17 * existing convention):

18 * OPENWOP_BASE_URL, OPENWOP_API_KEY, OPENWOP_IMPLEMENTATION_NAME,

19 * OPENWOP_IMPLEMENTATION_VERSION, OPENWOP_LIFECYCLE_TIMEOUT_MS

20 *

21 * Exit codes:

22 * 0 all scenarios pass

23 * 1 one or more scenarios failed

24 * 2 suite couldn't start (missing required args, etc)

25 */

26import { spawnSync } from 'node:child_process';

27import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L25

28import { dirname, resolve as resolvePath, join } from 'node:path';

29import { createHash } from 'node:crypto';

30import { readFileSync, writeFileSync, mkdtempSync, rmSync } from 'node:fs';

31import { tmpdir } from 'node:os';

32import Ajv2020 from 'ajv/dist/2020.js';

33import addFormats from 'ajv-formats';

34import { SCHEMAS_DIR } from './lib/paths.js';

35import { deriveProfiles, isCoreStandard, agentPlatformStatus, } from './lib/profiles.js';

36function parseArgs(argv) {

37 let baseUrl;

38 let apiKey;

39 let offline = false;

40 let filter;

41 let help = false;

42 let impl;

43 let implVersion;

44 let certify;

45 for (let i = 0; i < argv.length; i++) {

Lines 360-393javascript

360 'Run `openwop-conformance --help` for usage.\n');

361 process.exit(2);

362 }

363 // Resolve the conformance directory relative to this script's location

364 // so the CLI works regardless of the caller's cwd. Both the source

365 // path (`src/cli.ts`) and the compiled path (`dist/cli.js`) live ONE

366 // directory below the package root, so the same `..` works either way.

367 const here = dirname

src/scenarios/idempotency-key-determinism.test.tsView file

Lines 81-121typescript

81 h.update('\0', 'utf8');

82 h.update(nodeId, 'utf8');

83 h.update('\0', 'utf8');

84 if (payload !== undefined && payload !==

src/scenarios/sandbox-mvp-behavior.test.tsView file

Lines 1-28typescript

1/**

2 * sandbox-mvp-behavior — RFC 0035 §B behavioral probes via the node:vm sandbox MVP.

3 *

4 * Companion to the 8 advertisement-shape `sandbox-*.test.ts` files. This

5 * file exercises the 5 RFC 0035 §B failure-mode invariants the

6 * node:vm-based reference MVP supports:

7 *

8 * 1. host-fs-escape — sandboxed code attempting `require('fs')` fails closed

9 * 2. host-env-leak — sandboxed code attempting `process.env` access fails closed

10 * 3. network-escape — sandboxed code attempting `require('http')` fails closed

src/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1View file

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/scenarios/safefetch-live-audit.test.ts#virtual:normalized:round1View on unpkg · L9

fixtures/wasm-sandbox/misbehaving-fs.wasmView file

•path = fixtures/wasm-sandbox/misbehaving-fs.wasm kind = payload_in_excluded_dir sizeBytes = 92 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

fixtures/wasm-sandbox/misbehaving-fs.wasmView on unpkg

•path = fixtures/wasm-sandbox/misbehaving-fs.wasm kind = wasm_module sizeBytes = 92 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

fixtures/wasm-sandbox/misbehaving-fs.wasmView on unpkg