registry / @rallycry/conveyor-agent / 10.13.65

@rallycry/conveyor-agent@10.13.65

⚠ Under review

Conveyor Agent Runner v10 - PTY harness for the task chat (SDK harness for audit/project-chat). Agent-as-User architecture with BaseService patterns. Works locally too.

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 851 KB of source, external domains: api.conveyor.rallycryapp.com, github.com

Source & flagged code

7 flagged

dist/chunk-BAQ2OAKB.jsView file

62function emitFailureEvent(payload) { L63: process.stderr.write(JSON.stringify(payload) + "\n"); L64: } ... L70: if (bootstrapToken) headers["x-codespace-token"] = bootstrapToken; L71: const response = await fetch(`${apiUrl}/api/codespace/bootstrap/${instanceName}`, { L72: headers, ... L75: if (!response.ok) { L76: const errorText = await response.text().catch(() => ""); L77: return { ... L111: const hasBootstrapToken = Boolean(opts.bootstrapToken); L112: const hasTaskToken = Boolean(process.env.CONVEYOR_TASK_TOKEN); L113: let lastReason = "unknown";

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/chunk-BAQ2OAKB.jsView on unpkg · L62

62Trigger-reachable chain: manifest.main -> dist/index.js -> dist/chunk-BAQ2OAKB.js L62: function emitFailureEvent(payload) { L63: process.stderr.write(JSON.stringify(payload) + "\n"); L64: } ... L70: if (bootstrapToken) headers["x-codespace-token"] = bootstrapToken; L71: const response = await fetch(`${apiUrl}/api/codespace/bootstrap/${instanceName}`, { L72: headers, ... L75: if (!response.ok) { L76: const errorText = await response.text().catch(() => ""); L77: return { ... L111: const hasBootstrapToken = Boolean(opts.bootstrapToken); L112: const hasTaskToken = Boolean(process.env.CONVEYOR_TASK_TOKEN); L113: let lastReason = "unknown";

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/chunk-BAQ2OAKB.jsView on unpkg · L62

62Trigger-reachable credential exfiltration chain: manifest.main -> dist/index.js -> dist/chunk-BAQ2OAKB.js L62: function emitFailureEvent(payload) { L63: process.stderr.write(JSON.stringify(payload) + "\n"); L64: } ... L70: if (bootstrapToken) headers["x-codespace-token"] = bootstrapToken; L71: const response = await fetch(`${apiUrl}/api/codespace/bootstrap/${instanceName}`, { L72: headers, ... L75: if (!response.ok) { L76: const errorText = await response.text().catch(() => ""); L77: return { ... L111: const hasBootstrapToken = Boolean(opts.bootstrapToken); L112: const hasTaskToken = Boolean(process.env.CONVEYOR_TASK_TOKEN); L113: let lastReason = "unknown";

High

Trigger Reachable Credential Exfiltration

A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.

dist/chunk-BAQ2OAKB.jsView on unpkg · L62

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/chunk-BAQ2OAKB.jsView on unpkg

dist/boot-7OPX55AO.jsView file

Lines 7-47javascript

7 defaultGit,

8 ensureDir,

9 readAgentVersion,

10 redactToken,

11 reportBootMilestone

12} from "./chunk-QZN6HVUY.js";

13import {

14 workbenchPort

15} from "./chunk-4VUQ2NPF.js";

runtime/entrypoint.shView file

•path = runtime/entrypoint.sh kind = build_helper sizeBytes = 603 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

runtime/entrypoint.shView on unpkg

Source & flagged code

7 flagged · loading source

dist/chunk-BAQ2OAKB.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code