registry / @promptowl/contextnest-community / 1.29.1

@promptowl/contextnest-community@1.29.1

ContextNest Community Edition — self-hosted context governance server for AI workflows. Commercial software by Promptowl LLC.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

Source inspection found no concrete attack: the flagged key handling is connected to the own-model feature and provider requests use the selected provider endpoint. The editor’s flagged callFunction pattern is math parser code, and the manifest has no install-time hook.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The application invokes its license own-model or provider model functionality.

Impact

These requests support the package’s license and model features; no unrelated recipient or concrete attack behavior was established.

Mechanism

A configured provider key is sent to the PromptOwl license API for own-model setup, or to the configured provider base URL for model access.

AI rationale

Evidence

package.jsondist/chunk-7HVH3UAK.jsdist/chunk-5SDWJZVF.jsdist/web3/assets/MarkdownEditor-DGolyrq3.js

Network endpoints2

api.anthropic.comconfig.PROMPTOWL_API_URL

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The package entrypoint is dist/index.js and its only lifecycle hook is prepublishOnly running the build.
The flagged key submission targets the configured PromptOwl license API as part of the own-model feature.
Provider credentials are sent to the credential’s configured base URL, defaulting to api.anthropic.com.
The editor finding is in bundled math parsing code; its inspected callFunction usage is parser functionality.

Evidence against

Behavioral surface

Source

CryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationUrlStrings

Manifest

NoLicense

scanned 89 file(s), 4.36 MB of source, external domains: accounts.google.com, acme.example.com, adaptivecards.io, api.anthropic.com, app.posthog.com, app.promptowl.ai, calendar.app.google, cdn.example.com, claude.ai, claude.com, code.claude.com, community.example.com, cursor.com, developers.openai.com, docs.x.ai, example.com, github.com, grok.com, hermes-agent.nousresearch.com, hooks.slack.com, json-schema.org, learn.chatgpt.com, login.microsoftonline.com, mcp.example.com, nest.acme.com, nest.example.com, nest.yourcompany.com, nodejs.org, player.vimeo.com, posthog.com, promptowl.ai, prosemirror.net, radix-ui.com, reactjs.org, sentry.io, stuk.github.io, us.i.posthog.com, us.posthog.com, www.npmjs.com, www.perplexity.ai, www.w3.org, www.youtube-nocookie.com, www.youtube.com, yandex.com

Source & flagged code

3 flagged

dist/web3/assets/page-Ds_1mwSN.jsView file

Lines 6-46javascript

6 */const Hr=[["rect",{width:"20",height:"5",x:"2",y:"3",rx:"1",key:"1wp1u1"}],["path",{d:"M4 8v11a2 2 0 0 0 2 2h2",key:"tvwodi"}],["path",{d:"M20 8v11a2 2 0 0 1-2 2h-2",key:"1gkqxj"}],["path",{d:"m9 15 3-3 3 3",key:"1pd0qc"}],["path",{d:"M12 12v9",key:"192myk"}]],qr=gt("archive-restore",Hr);/**

7 * @license lucide-react v0.577.0 - ISC

8 *

9 * This source code is licensed under the ISC license.

10 * See the LICENSE file in the root directory of this source tree.

11 */const Gr=[["path",{d:"M17 3a2 2 0 0 1 2 2v15a1 1 0 0 1-1.496.868l-4.512-2.578a2 2 0 0 0-1.984 0l-4.512 2.578A1 1 0 0 1 5 20V5a2 2 0 0 1 2-2z",key:"oz39mx"}]],Kr=gt("bookmark",Gr);/**

12 * @license lucide-react v0.577.0 - ISC

13 *

14 * This source code is licensed under the ISC license.

15 * See the LICENSE file in the root directory of this source tree.

16 */const Yr=[["path",{d:"M9 20H4a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h3.9a2 2 0 0 1 1.69.9l.81 1.2a2 2 0 0 0 1.67.9H20a2 2 0 0 1 2 2v.5",key:"1dkoa9"}],["path",{d:"M12 10v4h4",key:"1czhmt"}],["path",{d:"m12 14 1.535-1.605a5 5 0 0 1 8 1.5",key:"lvuxfi"}],["path",{d:"M22 22v-4h-4",key:"1ewp4q"}],["path",{d:"m22 18-1.535 1.605a5 5 0 0 1-8-1.5"

18JSZip v3.10.1 - A JavaScript class for generating and reading zip files

19<http://stuartk.com/jszip>

22Dual licenced under the MIT license or GPLv3. See https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.

24JSZip uses the library pako released under the MIT license :

25https://github.com/nodeca/pako/blob/main/LICENSE

26*/var Tt;function nn(){return Tt||(Tt=1,(function(M,V){(function(m){M.exports=m()})(function(){return

27\0`,K+=c(I,2),K+=P.magic,K+=c(w,2),K+=c(S,2),K+=c(se.crc32,4),K+=c(se.compressedSize,4),K+=c(se.uncompressedSize,4),K+=c(W.length,2),K+=c(O.length,2),{fileRecord:g.LOCAL_FILE_HEADER+K+W+O,dirRecord:g.CENTRAL_FILE_HEADER+c(ee,2)+K+c(te.length,2)+"\0\0\0\0"+c(E,4)+c(h,4)+W+O+te}}var r=m("../utils"),o=m("../stream/GenericWorker"),_=m("../utf8"),y=m("../crc32"),g=m("../signature");function b(i,u,n,h){o.call(this,"ZipFileWorker"),this.bytesWritten=0,this.zipComment=u,this.zipPlatform=n,this.encodeFileName=h,this.streamFiles=i,this.accumulate=!1,this.contentBuffer=[],this.dirRecords=[],this.currentS ...

28`),C=r=>/^---\n[\s\S]*?\n---\n/.test(r);if(!m.startsWith("---")||!m.includes(`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web3/assets/page-Ds_1mwSN.jsView on unpkg · L26

30---

32`))return[{path:V,content:M}];const v=[];for(const r of m.split(`

34---

36`))C(r)||v.length===0?v.push(r):v[v.length-1]+=`

38---

40${r}`;if(v.length<2)return[{path:V,content:M}];const c=(r,o)=>{var y,g;return(((g=(y=r.match

41 - a positive number

42 - less than the value passed to \`max\` (or ${vt} if no \`max\` prop is set)

43 - \`null\` or \`undefined\` if the progress is indeterminate.

45Defaulting to \`null\`.`}var Vt=qt,xn=Kt;const Xt=ne.forwardRef(({className:M,value:V,...m},C)=>s.jsx(Vt,{ref:

Long lines were clipped for display.

dist/chunk-7HVH3UAK.jsView file

Lines 1-35javascript

1import {

2 config,

3 getDb,

4 teamRoleToPermission

5} from "./chunk-XDJDLRXQ.js";

6import {

7 ANON_USER_ID

8} from "./chunk-YB3LKF7U.js";

dist/web3/assets/MarkdownEditor-DGolyrq3.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/web3/assets/MarkdownEditor-DGolyrq3.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/web3/assets/page-Ds_1mwSN.jsView file

26*/var Tt;function nn(){return Tt||(Tt=1,(function(M,V){(function(m){M.exports=m()})(function(){return(function m(C,v,c){function a(_,y){if(!v[_]){if(!C[_]){var g=typeof Ge=="functi... L27: \0`,K+=c(I,2),K+=P.magic,K+=c(w,2),K+=c(S,2),K+=c(se.crc32,4),K+=c(se.compressedSize,4),K+=c(se.uncompressedSize,4),K+=c(W.length,2),K+=c(O.length,2),{fileRecord:g.LOCAL_FILE_HEADE... L28: `),C=r=>/^---\n[\s\S]*?\n---\n/.test(r);if(!m.startsWith("---")||!m.includes(`

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/web3/assets/page-Ds_1mwSN.jsView on unpkg · L26

dist/chunk-7HVH3UAK.jsView file

15Source sends the broad process environment to a literal external destination. L15: var SERVICE_VERSION = (() => { L16: for (const up of [["..", "package.json"], ["..", "..", "package.json"]]) { L17: try { L18: const pkg = JSON.parse(readFileSync(join(HERE, ...up), "utf8")); L19: if (pkg?.name === "@promptowl/contextnest-community") { ... L105: async function masterKey() { L106: const fromEnv = (process.env.SECRETS_KEY || "").trim(); L107: if (fromEnv) { ... L196: var DEFAULT_LICENSE_CONTACT = { L197: url: "https://calendar.app.google/u2z8xh5PqDjQJih78", L198: email: "support@promptowl.ai" ... L261: headers: config.PROMPTOWL_FETCH_HEADERS,

Findings

1 Critical1 High3 Medium7 Low

CriticalHardcoded Runtime Data Exfiltrationdist/chunk-7HVH3UAK.js

HighSemantic Analysis Limiteddist/web3/assets/MarkdownEditor-DGolyrq3.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/web3/assets/page-Ds_1mwSN.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @promptowl/contextnest-community@1.29.1.

See all versions of @promptowl/contextnest-community for other recorded verdicts.

Review the evidence and your use of @promptowl/contextnest-community@1.29.1 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-11 19:16:03.048Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.