registry / @proagentstore/cli / 0.3.5

@proagentstore/cli@0.3.5

CLI for creating, publishing, and running ProAgentStore agents

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 200 KB of source, external domains: 127.0.0.1, api.proagentstore.online, example.test, github.com, js.hcaptcha.com, mcp.proagentstore.online, proagentstore.online

Source & flagged code

5 flagged

dist/browser-runner/runner.jsView file

Lines 1-21javascript

1import { spawnSync } from "node:child_process";

2import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/browser-runner/runner.jsView on unpkg · L1

3import { createRequire } from "node:module";

4import { basename, dirname, join, resolve } from "node:path";

5import { pathToFileURL } from "node:url";

6import { captureScreenshotDataUrl, challengeSolved, detectHumanChallenge } from "./challenge.js";

7import { resolveRealChromeProfileDir, seedProfileCopy } from "./browser-profile.js";

8import { inspectField, performBrowserAction } from "./browser-actions.js";

9import { HumanHandoffError, RunnerInputError } from "./errors.js";

10import { RunnerStore } from "./store.js";

11import { CodingRuntime } from "./coding/runtime.js";

12/** True for a plain object. */

13function isRecord(value) {

14 return typeof value === "object" && value !== null && !Array.isArray(value);

15}

16/** Coerce a value to a trimmed string ("" for non-strings). */

17function stringValue(value) {

18 return typeof value === "string" ? value.trim() : "";

19}

20export { HumanHandoffError, RunnerInputError } from "./errors.js";

21const CAPABILITIES = [

•matchType = previous_version_dangerous_delta matchedPackage = @proagentstore/cli@0.3.3 matchedIdentity = npm:QHByb2FnZW50c3RvcmUvY2xp:0.3.3 similarity = 0.889 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/browser-runner/runner.jsView on unpkg

dist/browser-runner/coding/runtime.jsView file

Lines 34-74javascript

34 // clone into a managed dir. Without this the CLI would launch nowhere.

35 const workDir = input.workDir

36 ? resolve(input.workDir.replace(/^~(?=$|\/)/, homedir()))

37 : join(this.reposBaseDir,

dist/index.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

3 get: (a,

Source & flagged code

5 flagged · loading source

dist/browser-runner/runner.jsView file

1import { spawnSync } from "node:child_process"; L2: import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/browser-runner/runner.jsView on unpkg · L1

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/browser-runner/runner.jsView on unpkg

dist/browser-runner/coding/runtime.jsView file

54snapshot(sessionId) { L55: const session = this.require(sessionId); L56: const alive = session.alive;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/browser-runner/coding/runtime.jsView on unpkg · L54

dist/index.jsView file

504// src/commands/mcp.ts L505: import { spawn } from "child_process"; L506: import { Command as Command4 } from "commander"; L507: var DEFAULT_MCP_URL = "https://mcp.proagentstore.online/mcp"; L508: function buildMcpRemoteArgs(opts, extraArgs = []) { ... L513: stdio: "inherit", L514: env: process.env L515: });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L504

19function writeLine(message = "") { L20: process.stdout.write(`${message} L21: `); ... L41: try { L42: manifest = JSON.parse(readFileSync(manifestPath, "utf-8")); L43: } catch { ... L70: }); L71: const hasPkg = existsSync(join(dir, "package.json")); L72: results.push({ ... L119: var __filename = fileURLToPath(import.meta.url); L120: var __dirname = dirname(__filename); L121: var TEMPLATES = ["worker", "cron", "api"];

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L19

Findings

5 High4 Medium4 Low

HighChild Processdist/browser-runner/runner.js

HighShell

HighSame File Env Network Executiondist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

HighPrevious Version Dangerous Deltadist/browser-runner/runner.js

MediumDynamic Requiredist/browser-runner/coding/runtime.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

dist/browser-runner/runner.jsView file

Lines 1-21javascript

1import { spawnSync } from "node:child_process";

2import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/browser-runner/runner.jsView on unpkg · L1

3import { createRequire } from "node:module";

4import { basename, dirname, join, resolve } from "node:path";

5import { pathToFileURL } from "node:url";

6import { captureScreenshotDataUrl, challengeSolved, detectHumanChallenge } from "./challenge.js";

7import { resolveRealChromeProfileDir, seedProfileCopy } from "./browser-profile.js";

8import { inspectField, performBrowserAction } from "./browser-actions.js";

9import { HumanHandoffError, RunnerInputError } from "./errors.js";

10import { RunnerStore } from "./store.js";

11import { CodingRuntime } from "./coding/runtime.js";

12/** True for a plain object. */

13function isRecord(value) {

14 return typeof value === "object" && value !== null && !Array.isArray(value);

15}

16/** Coerce a value to a trimmed string ("" for non-strings). */

17function stringValue(value) {

18 return typeof value === "string" ? value.trim() : "";

19}

20export { HumanHandoffError, RunnerInputError } from "./errors.js";

21const CAPABILITIES = [

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/browser-runner/runner.jsView on unpkg

dist/browser-runner/coding/runtime.jsView file

Lines 34-74javascript

34 // clone into a managed dir. Without this the CLI would launch nowhere.

35 const workDir = input.workDir

36 ? resolve(input.workDir.replace(/^~(?=$|\/)/, homedir()))

37 : join(this.reposBaseDir,

dist/index.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

2var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

3 get: (a,

Lines 484-524javascript

484});

485var whoamiCommand = new Command3("whoami").description("Show current signed-in user").action(() => {

486 const session = loadSession();

487 if (session) {

488 writeLine(`${session.user.login} (${session.user.id})`);

489 } else {

490 writeLine("Not logged in. Run: pags login");

491 }

492});

493async function findFreePort() {

494 return new Promise((resolve5) => {

495 const server = createServer();

496 server.listen(0, "127.0.0.1", () => {

497 const addr = server.address();

498 const port = typeof addr === "object" && addr ? addr.port : 0;

499 server.close(() => resolve5(port));

500 });

501 });

502}

503

504// src/commands/mcp.ts

505import { spawn } from "child_process";

506import { Command as Command4 } from "commander";

507var DEFAULT_MCP_URL = "https://mcp.proagentstore.online/mcp";

508function buildMcpRemoteArgs(opts, extraArgs = []) {

509 return ["-y", "mcp-remote", opts.url || DEFAULT_MCP_URL, ...extraArgs];

510}

511async function runMcpProxy(opts, extraArgs = []) {

512 const child = spawn("npx", buildMcpRemoteArgs(opts, extraArgs), {

513 stdio: "inherit",

514 env: process.env

515 });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L504

516 await new Promise((resolve5, reject) => {

517 child.on("error", reject);

518 child.on("close", (code) => {

519 if (code && code !== 0) reject(new Error(`mcp proxy exited with code ${code}`));

520 else resolve5();

521 });

522 });

523}

524var mcpCommand = new Command4("mcp").description("Run a local stdio proxy for the official ProAgentStore MCP server").option("--url <url>", "Remote MCP endpoint", DEFAULT_MCP_URL).argument("[args...]", "Extra arguments passed to mcp-remote").action(async (args, opts) => {