registry / @proagentstore/cli / 0.4.179
@proagentstore/cli@0.4.179
CLI for creating, publishing, and running ProAgentStore agents
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the update path is activated by running `pags up`. The flagged network and process capabilities are consistent with the CLI's runner and browser features; the inspected source does not establish a concrete attack surface.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs the CLI or requests a runner or site-builder task.
Impact
The inspected behavior supports the package's CLI and runner functions; no unrelated credential transfer or unconsented install-time mutation was identified.
Mechanism
The launcher may update its cached CLI during `pags up`; runner modules download and configure GitHub Actions runners for validated GitHub scopes.
AI rationale
The manifest has no install lifecycle hook, and the update path is activated by running `pags up`. The flagged network and process capabilities are consistent with the CLI's runner and browser features; the inspected source does not establish a concrete attack surface.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the `pags` command and lists build and development scripts, with no install lifecycle hook.
- The launcher checks for updates only when the user runs `pags up`; it installs updates into a separate package cache.
- The inspected dependencies provide MCP client/server transports and Playwright browser automation.
- Runner setup validates a GitHub organization or repository URL and starts only through a requested runner job; the inspected repository and terminal modules support those runner features.
- The site builder uses a run-specific ProAgentStore broker, and Windows runner setup is platform-gated.
- The dependency manifest identifies @playwright/mcp version 0.0.77 as Playwright tools for MCP.
Evidence against
- The package can download and execute updated releases when `pags up` is run.
- Runner features download and configure a GitHub Actions runner and support local process execution; the inspected source ties these operations to runner jobs and validated targets.
Behavioral surface
ChildProcess
Source & flagged code
9 flaggeddist/browser-runner/site-builder/runtime.jsView file
32*/
L33: import { spawn as nodeSpawn } from "node:child_process";
L34: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/browser-runner/site-builder/runtime.jsView on unpkg · L32dist/browser-runner/coding/windows-runner-live.jsView file
59busy: async (dir) => {
L60: const ps = spawnSync("powershell", ["-NoProfile", "-Command", `(Get-CimInstance Win32_Process -Filter "Name='Runner.Worker.exe'" | Where-Object { $_.ExecutablePath -like '${dir.rep...
L61: return ps.status === 0 && Number.parseInt(String(ps.stdout).trim(), 10) > 0;
High
Shell
Package source references shell execution.
dist/browser-runner/coding/windows-runner-live.jsView on unpkg · L59Findings
1 Critical6 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/browser-runner/site-builder/runtime.js
HighShelldist/browser-runner/coding/windows-runner-live.js
HighSame File Env Network Executiondist/browser-runner/coding/actions-runner.js#virtual:normalized:round1
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/browser-runner/coding/actions-runner.js
HighSemantic Analysis Limiteddist/browser-runner/coding/actions-runner.js#virtual:normalized:round1
MediumDynamic Requiredist/browser-runner/coding/runtime.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistence
Affected versions and remediation
This report applies to @proagentstore/cli@0.4.179.
See all versions of @proagentstore/cli for other recorded verdicts.
- Review the evidence and your use of @proagentstore/cli@0.4.179 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.