registry / @proagentstore/cli / 0.4.187
@proagentstore/cli@0.4.187
CLI for creating, publishing, and running ProAgentStore agents
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install hook, and the reviewed credential and network paths are consistent with CLI login, PAGS API use, runner management and matching-provider model lookup. The scanner’s command execution and persistence signals align with these features; the inspected source did not establish an attack.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The launcher imports the CLI when the user runs `pags`; runner, login and model-list behavior is reached through CLI or agent operations.
Impact
No malicious collection, unrelated credential forwarding or other attack behavior was established in the inspected paths.
Mechanism
The inspected network calls use PAGS services or the relevant AI provider’s own model-list API. The flagged command and persistence behavior fits runner and service management in the CLI.
AI rationale
The manifest has no install hook, and the reviewed credential and network paths are consistent with CLI login, PAGS API use, runner management and matching-provider model lookup. The scanner’s command execution and persistence signals align with these features; the inspected source did not establish an attack.
Evidence
package.jsondist/bootstrap.jsdist/index.jsdist/browser-runner/coding/actions-runner.jsdist/browser-runner/coding/engine-check.jsdist/browser-runner/site-builder/runtime.js
Network endpoints3
api.proagentstore.onlineapi.anthropic.com/v1/models?limit=1000api.openai.com/v1/models
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a ProAgentStore CLI and exposes `dist/bootstrap.js` as its executable; it declares build, development, typecheck and package-test scripts, with no install lifecycle hook.
- The launcher imports the selected CLI payload when the `pags` command runs.
- The model-list feature uses a provider’s environment API key for a request to that same provider’s model-list endpoint, and says the key is not returned.
- PAGS API requests require a PAGS token and target the configured PAGS API base; the default is ProAgentStore’s API.
- The new Actions runner code describes an explicit runner install flow and downloads the official `actions/runner` release.
Evidence against
- The package contains command execution and service or watchdog management, but the inspected code ties these to CLI runner and lifecycle-management features.
- The credential-related engine check concerns listing models through the matching provider API, not sending keys to a foreign collector.
Behavioral surface
ChildProcessCrypto
Source & flagged code
9 flaggeddist/browser-runner/site-builder/runtime.jsView file
32*/
L33: import { spawn as nodeSpawn } from "node:child_process";
L34: import { randomBytes } from "node:crypto";
High
Child Process
Package source references child process execution.
dist/browser-runner/site-builder/runtime.jsView on unpkg · L32dist/browser-runner/coding/windows-runner-live.jsView file
59busy: async (dir) => {
L60: const ps = spawnSync("powershell", ["-NoProfile", "-Command", `(Get-CimInstance Win32_Process -Filter "Name='Runner.Worker.exe'" | Where-Object { $_.ExecutablePath -like '${dir.rep...
L61: return ps.status === 0 && Number.parseInt(String(ps.stdout).trim(), 10) > 0;
High
Shell
Package source references shell execution.
dist/browser-runner/coding/windows-runner-live.jsView on unpkg · L59Findings
2 Critical5 High5 Medium4 Low
CriticalCommand Output Exfiltrationdist/index.js
CriticalPrevious Version Dangerous Deltadist/browser-runner/coding/actions-runner.js
HighChild Processdist/browser-runner/site-builder/runtime.js
HighShelldist/browser-runner/coding/windows-runner-live.js
HighSame File Env Network Executiondist/index.js
HighSandbox Evasion Gated Capabilitydist/browser-runner/coding/actions-runner.js
HighSemantic Analysis Limiteddist/browser-runner/coding/actions-runner.js#virtual:normalized:round1
MediumDynamic Requiredist/browser-runner/coding/runtime.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
Affected versions and remediation
This report applies to @proagentstore/cli@0.4.187.
See all versions of @proagentstore/cli for other recorded verdicts.
- Review the evidence and your use of @proagentstore/cli@0.4.187 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.