registry / @reactive-agents/cli / 0.13.5

@reactive-agents/cli@0.13.5

rax — the Reactive Agents CLI for scaffolding, running, and inspecting AI agents

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 1 file(s), 204 KB of source, external domains: 127.0.0.1, agent.example.com, aistudio.google.com, blog.example.com, cloud.digitalocean.com, cloud.google.com, console.anthropic.com, dashboard.render.com, docs.digitalocean.com, docs.docker.com, docs.reactiveagents.dev, example.io, fly.io, github.com, hacker-news.firebaseio.com, hashnode.example.dev, news.ycombinator.com, openai.com, platform.openai.com, railway.com, render.com

Source & flagged code

6 flagged

dist/index.jsView file

Lines 555-595javascript

555 if (recipeIdx !== -1 && args[recipeIdx + 1]) {

556 const r = args[recipeIdx + 1];

557 if (!VALID_RECIPES.includes(r)) {

558 console.error(fail(`Invalid recipe: ${r}. Valid options: ${VALID_RECIPES.join(", ")}`));

559 process.exit(1);

560 }

561 recipe = r;

562 }

563 console.log(section("Create Agent"));

564 console.log(info(`Creating agent "${name}" with recipe "${recipe}"...`));

565 const result = generateAgent({

566 name,

567 recipe,

568 targetDir: process.cwd()

569 });

570 console.log(success(`Created: ${result.filePath}`));

571}

572

573// src/commands/dev.ts

574import { existsSync as existsSync3 } from "fs";

575import { join as join4, resolve } from "path";

576import { spawnSync } from "child_process";

577var HELP3 = `

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L575

578 Usage: rax dev [options]

579

580 Run your local agent entrypoint in watch mode.

581

582 Options:

583 --entry <path> Entry file to run (default: src/index.ts)

584 --no-watch Run once without file watching

585 --help Show this help

586`.trimEnd();

587function runDev(args) {

588 if (args.includes("--help") || args.includes("-h")) {

589 console.log(HELP3);

590 return;

591 }

592 let entry = "src/index.ts";

593 let watch = true;

594 for (let i = 0; i < args.length; i++) {

595 const arg = args[i];

Lines 649-689javascript

649 return i >= 0 && i + 1 < args.length ? args[i + 1] : void 0;

650 };

651 const num = (flag) => {

652

Lines 2679-2719javascript

2679 }

2680 banner("rax serve", `Starting A2A server: ${name}`);

2681 console.log(kv("Port", String(port)));

2682 console.log(kv("Provider", `${provider}${model ? ` (${model})` :

Lines 4198-4238javascript

4198

4199// src/templates/railway.ts

4200var railwayJsonTemplate = (agentName) => `{

4201 "$schema": "https://railway.com/railway.schema.json",

4202 "build": {

4203 "builder": "DOCKERFILE",

4204 "dockerfilePath": "Dockerfile"

4205 },

4206 "deploy": {

4207 "startCommand": "",

4208 "healthcheckPath": "/health",

Lines 4607-4647javascript

4607 - "--memory"

4608 - "512Mi"

4609 - "--timeout"

4610 - "300"

4611 - "--allow-unauthenticated"

4612

4613images:

4614 - "gcr.io/${projectId}/raxd-${agentName}"

4615`;

Lines 4883-4923javascript

4883 OLLAMA_BASE_URL: http://ollama:11434

4884 cap_drop:

4885 - ALL

4886 security_opt:

4887 - no-new-privileges

4888 deploy:

4889 resources:

4890 limits:

Source & flagged code

6 flagged · loading source

dist/index.jsView file

575import { join as join4, resolve } from "path"; L576: import { spawnSync } from "child_process"; L577: var HELP3 = `

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L575

4903entrypoint: > L4904: sh -c "sleep 10 && curl -s http://ollama:11434/api/pull -d '{"name": "qwen3:14b"}'" L4905:

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L4903

4627function getRegion() { L4628: return process.env.GCP_REGION ?? DEPLOY_DEFAULTS.regions.cloudrun; L4629: } ... L4631: try { L4632: const out = exec("gcloud auth list --filter=status:ACTIVE --format='value(account)' 2>/dev/null"); L4633: return out.trim().length > 0; ... L4641: cliNames: ["gcloud"], L4642: installHint: "https://cloud.google.com/sdk/docs/install", L4643: preflight(ctx) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4627

2699package = @reactive-agents/cli; repositoryIdentity = reactive-agents-ts; dependency = @reactive-agents/a2a L2699: } L2700: const { generateAgentCard } = await import("@reactive-agents/a2a"); L2701: const agentCard = generateAgentCard({

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2699

4218try { L4219: const out = exec("railway whoami 2>/dev/null"); L4220: return out.length > 0; ... L4228: cliNames: ["railway"], L4229: installHint: "npm install -g @railway/cli", L4230: preflight(ctx) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L4218

669try { L670: benchmarks = await import("@reactive-agents/benchmarks"); L671: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L669

Findings

5 High5 Medium4 Low

HighChild Processdist/index.js

HighShelldist/index.js

HighSame File Env Network Executiondist/index.js

HighCopied Package Dependency Bridgedist/index.js

HighRuntime Package Installdist/index.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/index.jsView file

Lines 555-595javascript

555 if (recipeIdx !== -1 && args[recipeIdx + 1]) {

556 const r = args[recipeIdx + 1];

557 if (!VALID_RECIPES.includes(r)) {

558 console.error(fail(`Invalid recipe: ${r}. Valid options: ${VALID_RECIPES.join(", ")}`));

559 process.exit(1);

560 }

561 recipe = r;

562 }

563 console.log(section("Create Agent"));

564 console.log(info(`Creating agent "${name}" with recipe "${recipe}"...`));

565 const result = generateAgent({

566 name,

567 recipe,

568 targetDir: process.cwd()

569 });

570 console.log(success(`Created: ${result.filePath}`));

571}

572

573// src/commands/dev.ts

574import { existsSync as existsSync3 } from "fs";

575import { join as join4, resolve } from "path";

576import { spawnSync } from "child_process";

577var HELP3 = `

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L575

578 Usage: rax dev [options]

579

580 Run your local agent entrypoint in watch mode.

581

582 Options:

583 --entry <path> Entry file to run (default: src/index.ts)

584 --no-watch Run once without file watching

585 --help Show this help

586`.trimEnd();

587function runDev(args) {

588 if (args.includes("--help") || args.includes("-h")) {

589 console.log(HELP3);

590 return;

591 }

592 let entry = "src/index.ts";

593 let watch = true;

594 for (let i = 0; i < args.length; i++) {

595 const arg = args[i];

Lines 649-689javascript

649 return i >= 0 && i + 1 < args.length ? args[i + 1] : void 0;

650 };

651 const num = (flag) => {

652

Lines 2679-2719javascript

2679 }

2680 banner("rax serve", `Starting A2A server: ${name}`);

2681 console.log(kv("Port", String(port)));

2682 console.log(kv("Provider", `${provider}${model ? ` (${model})` :

Lines 4198-4238javascript

4198

4199// src/templates/railway.ts

4200var railwayJsonTemplate = (agentName) => `{

4201 "$schema": "https://railway.com/railway.schema.json",

4202 "build": {

4203 "builder": "DOCKERFILE",

4204 "dockerfilePath": "Dockerfile"

4205 },

4206 "deploy": {

4207 "startCommand": "",

4208 "healthcheckPath": "/health",

Lines 4607-4647javascript

4607 - "--memory"

4608 - "512Mi"

4609 - "--timeout"

4610 - "300"

4611 - "--allow-unauthenticated"

4612

4613images:

4614 - "gcr.io/${projectId}/raxd-${agentName}"

4615`;

Lines 4883-4923javascript

4883 OLLAMA_BASE_URL: http://ollama:11434

4884 cap_drop:

4885 - ALL

4886 security_opt:

4887 - no-new-privileges

4888 deploy:

4889 resources:

4890 limits: