registry / @promptowl/contextnest-community / 1.29.0

@promptowl/contextnest-community@1.29.0

ContextNest Community Edition — self-hosted context governance server for AI workflows. Commercial software by Promptowl LLC.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

The scanner’s critical exfiltration hint is not supported by the inspected send path: it transmits aggregate license statistics to the configured PromptOwl API. The required manifest and bundle excerpts show ordinary server and editor code, with no confirmed malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

License validation runs when the server checks its license.

Impact

The vendor receives license-validation data and aggregate usage counts; the inspected code does not show credential harvesting or unrelated exfiltration.

Mechanism

The validation request sends the license key and a report containing the service version, optional public URL, and aggregate counts.

AI rationale

Evidence

package.jsondist/chunk-EBJOF3EI.jsdist/web3/assets/MarkdownEditor-DGolyrq3.js

Network endpoints1

${promptowlUrl}/api/license/validate

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package manifest identifies a server application and its build and start scripts.
License validation sends the package version, optional public URL, and aggregate user, subscriber, and nest counts to the configured PromptOwl API.
The flagged editor asset begins with bundled UI code and module imports; the inspected excerpt shows no attack behavior.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 89 file(s), 4.36 MB of source, external domains: accounts.google.com, acme.example.com, adaptivecards.io, api.anthropic.com, app.posthog.com, app.promptowl.ai, calendar.app.google, cdn.example.com, claude.ai, claude.com, code.claude.com, community.example.com, cursor.com, developers.openai.com, docs.x.ai, example.com, github.com, grok.com, hermes-agent.nousresearch.com, hooks.slack.com, json-schema.org, learn.chatgpt.com, login.microsoftonline.com, mcp.example.com, nest.acme.com, nest.example.com, nest.yourcompany.com, nodejs.org, player.vimeo.com, posthog.com, promptowl.ai, prosemirror.net, radix-ui.com, reactjs.org, sentry.io, stuk.github.io, us.i.posthog.com, us.posthog.com, www.npmjs.com, www.perplexity.ai, www.w3.org, www.youtube-nocookie.com, www.youtube.com, yandex.com

Source & flagged code

3 flagged

dist/web3/assets/page-Ds_1mwSN.jsView file

Lines 6-46javascript

6 */const Hr=[["rect",{width:"20",height:"5",x:"2",y:"3",rx:"1",key:"1wp1u1"}],["path",{d:"M4 8v11a2 2 0 0 0 2 2h2",key:"tvwodi"}],["path",{d:"M20 8v11a2 2 0 0 1-2 2h-2",key:"1gkqxj"}],["path",{d:"m9 15 3-3 3 3",key:"1pd0qc"}],["path",{d:"M12 12v9",key:"192myk"}]],qr=gt("archive-restore",Hr);/**

7 * @license lucide-react v0.577.0 - ISC

8 *

9 * This source code is licensed under the ISC license.

10 * See the LICENSE file in the root directory of this source tree.

11 */const Gr=[["path",{d:"M17 3a2 2 0 0 1 2 2v15a1 1 0 0 1-1.496.868l-4.512-2.578a2 2 0 0 0-1.984 0l-4.512 2.578A1 1 0 0 1 5 20V5a2 2 0 0 1 2-2z",key:"oz39mx"}]],Kr=gt("bookmark",Gr);/**

12 * @license lucide-react v0.577.0 - ISC

13 *

14 * This source code is licensed under the ISC license.

15 * See the LICENSE file in the root directory of this source tree.

16 */const Yr=[["path",{d:"M9 20H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h3.9a2 2 0 0 1 1.69.9l.81 1.2a2 2 0 0 0 1.67.9H20a2 2 0 0 1 2 2v.5",key:"1dkoa9"}],["path",{d:"M12 10v4h4",key:"1czhmt"}],["path",{d:"m12 14 1.535-1.605a5 5 0 0 1 8 1.5",key:"lvuxfi"}],["path",{d:"M22 22v-4h-4",key:"1ewp4q"}],["path",{d:"m22 18-1.535 1.605a5 5 0 0 1-8-1.5"

18JSZip v3.10.1 - A JavaScript class for generating and reading zip files

19<http://stuartk.com/jszip>

22Dual licenced under the MIT license or GPLv3. See https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.

24JSZip uses the library pako released under the MIT license :

25https://github.com/nodeca/pako/blob/main/LICENSE

26*/var Tt;function nn(){return Tt||(Tt=1,(function(M,V){(function(m){M.exports=m()})(function(){return

27\0`,K+=c(I,2),K+=P.magic,K+=c(w,2),K+=c(S,2),K+=c(se.crc32,4),K+=c(se.compressedSize,4),K+=c(se.uncompressedSize,4),K+=c(W.length,2),K+=c(O.length,2),{fileRecord:g.LOCAL_FILE_HEADER+K+W+O,dirRecord:g.CENTRAL_FILE_HEADER+c(ee,2)+K+c(te.length,2)+"\0\0\0\0"+c(E,4)+c(h,4)+W+O+te}}var r=m("../utils"),o=m("../stream/GenericWorker"),_=m("../utf8"),y=m("../crc32"),g=m("../signature");function b(i,u,n,h){o.call(this,"ZipFileWorker"),this.bytesWritten=0,this.zipComment=u,this.zipPlatform=n,this.encodeFileName=h,this.streamFiles=i,this.accumulate=!1,this.contentBuffer=[],this.dirRecords=[],this.currentS ...

28`),C=r=>/^---\n[\s\S]*?\n---\n/.test(r);if(!m.startsWith("---")||!m.includes(`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web3/assets/page-Ds_1mwSN.jsView on unpkg · L26

30---

32`))return[{path:V,content:M}];const v=[];for(const r of m.split(`

34---

36`))C(r)||v.length===0?v.push(r):v[v.length-1]+=`

38---

40${r}`;if(v.length<2)return[{path:V,content:M}];const c=(r,o)=>{var y,g;return(((g=(y=r.match

41 - a positive number

42 - less than the value passed to \`max\` (or ${vt} if no \`max\` prop is set)

43 - \`null\` or \`undefined\` if the progress is indeterminate.

45Defaulting to \`null\`.`}var Vt=qt,xn=Kt;const Xt=ne.forwardRef(({className:M,value:V,...m},C)=>s.jsx(Vt,{ref:

Long lines were clipped for display.

dist/chunk-EBJOF3EI.jsView file

Lines 1-35javascript

1import {

2 config,

3 getDb,

4 teamRoleToPermission

5} from "./chunk-O7K33U4B.js";

6import {

7 ANON_USER_ID

8} from "./chunk-YB3LKF7U.js";

dist/web3/assets/MarkdownEditor-DGolyrq3.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/web3/assets/MarkdownEditor-DGolyrq3.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/web3/assets/page-Ds_1mwSN.jsView file

26*/var Tt;function nn(){return Tt||(Tt=1,(function(M,V){(function(m){M.exports=m()})(function(){return(function m(C,v,c){function a(_,y){if(!v[_]){if(!C[_]){var g=typeof Ge=="functi... L27: \0`,K+=c(I,2),K+=P.magic,K+=c(w,2),K+=c(S,2),K+=c(se.crc32,4),K+=c(se.compressedSize,4),K+=c(se.uncompressedSize,4),K+=c(W.length,2),K+=c(O.length,2),{fileRecord:g.LOCAL_FILE_HEADE... L28: `),C=r=>/^---\n[\s\S]*?\n---\n/.test(r);if(!m.startsWith("---")||!m.includes(`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web3/assets/page-Ds_1mwSN.jsView on unpkg · L26

dist/chunk-EBJOF3EI.jsView file

15Source sends the broad process environment to a literal external destination. L15: var SERVICE_VERSION = (() => { L16: for (const up of [["..", "package.json"], ["..", "..", "package.json"]]) { L17: try { L18: const pkg = JSON.parse(readFileSync(join(HERE, ...up), "utf8")); L19: if (pkg?.name === "@promptowl/contextnest-community") { ... L105: async function masterKey() { L106: const fromEnv = (process.env.SECRETS_KEY || "").trim(); L107: if (fromEnv) { ... L196: var DEFAULT_LICENSE_CONTACT = { L197: url: "https://calendar.app.google/u2z8xh5PqDjQJih78", L198: email: "support@promptowl.ai" ... L261: headers: config.PROMPTOWL_FETCH_HEADERS,

Findings

1 Critical1 High3 Medium7 Low

CriticalHardcoded Runtime Data Exfiltrationdist/chunk-EBJOF3EI.js

HighSemantic Analysis Limiteddist/web3/assets/MarkdownEditor-DGolyrq3.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/web3/assets/page-Ds_1mwSN.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @promptowl/contextnest-community@1.29.0.

See all versions of @promptowl/contextnest-community for other recorded verdicts.

Review the evidence and your use of @promptowl/contextnest-community@1.29.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-12 00:26:43.988Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.