registry / @reactive-agents/cli / 0.13.0

@reactive-agents/cli@0.13.0

rax — the Reactive Agents CLI for scaffolding, running, and inspecting AI agents

Static Scan Results

scanned 3d ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 1 file(s), 197 KB of source, external domains: 127.0.0.1, agent.example.com, aistudio.google.com, blog.example.com, cloud.digitalocean.com, cloud.google.com, console.anthropic.com, dashboard.render.com, docs.digitalocean.com, docs.docker.com, docs.reactiveagents.dev, example.io, fly.io, github.com, hacker-news.firebaseio.com, hashnode.example.dev, news.ycombinator.com, openai.com, platform.openai.com, railway.com, render.com

Source & flagged code

6 flagged

dist/index.jsView file

Lines 555-595javascript

555 if (recipeIdx !== -1 && args[recipeIdx + 1]) {

556 const r = args[recipeIdx + 1];

557 if (!VALID_RECIPES.includes(r)) {

558 console.error(fail(`Invalid recipe: ${r}. Valid options: ${VALID_RECIPES.join(", ")}`));

559 process.exit(1);

560 }

561 recipe = r;

562 }

563 console.log(section("Create Agent"));

564 console.log(info(`Creating agent "${name}" with recipe "${recipe}"...`));

565 const result = generateAgent({

566 name,

567 recipe,

568 targetDir: process.cwd()

569 });

570 console.log(success(`Created: ${result.filePath}`));

571}

572

573// src/commands/dev.ts

574import { existsSync as existsSync3 } from "fs";

575import { join as join4, resolve } from "path";

576import { spawnSync } from "child_process";

577var HELP3 = `

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L575

578 Usage: rax dev [options]

579

580 Run your local agent entrypoint in watch mode.

581

582 Options:

583 --entry <path> Entry file to run (default: src/index.ts)

584 --no-watch Run once without file watching

585 --help Show this help

586`.trimEnd();

587function runDev(args) {

588 if (args.includes("--help") || args.includes("-h")) {

589 console.log(HELP3);

590 return;

591 }

592 let entry = "src/index.ts";

593 let watch = true;

594 for (let i = 0; i < args.length; i++) {

595 const arg = args[i];

Lines 649-689javascript

649 return i >= 0 && i + 1 < args.length ? args[i + 1] : void 0;

650 };

651 const num = (flag) => {

652

Lines 2446-2486javascript

2446 }

2447 banner("rax serve", `Starting A2A server: ${name}`);

2448 console.log(kv("Port", String(port)));

2449 console.log(kv("Provider", `${provider}${model ? ` (${model})` :

Lines 3963-4003javascript

3963

3964// src/templates/railway.ts

3965var railwayJsonTemplate = (agentName) => `{

3966 "$schema": "https://railway.com/railway.schema.json",

3967 "build": {

3968 "builder": "DOCKERFILE",

3969 "dockerfilePath": "Dockerfile"

3970 },

3971 "deploy": {

3972 "startCommand": "",

3973 "healthcheckPath": "/health",

Lines 4372-4412javascript

4372 - "--memory"

4373 - "512Mi"

4374 - "--timeout"

4375 - "300"

4376 - "--allow-unauthenticated"

4377

4378images:

4379 - "gcr.io/${projectId}/raxd-${agentName}"

4380`;

Lines 4648-4688javascript

4648 OLLAMA_BASE_URL: http://ollama:11434

4649 cap_drop:

4650 - ALL

4651 security_opt:

4652 - no-new-privileges

4653 deploy:

4654 resources:

4655 limits:

Source & flagged code

6 flagged · loading source

dist/index.jsView file

575import { join as join4, resolve } from "path"; L576: import { spawnSync } from "child_process"; L577: var HELP3 = `

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L575

4668entrypoint: > L4669: sh -c "sleep 10 && curl -s http://ollama:11434/api/pull -d '{"name": "qwen3:14b"}'" L4670:

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L4668

4392function getRegion() { L4393: return process.env.GCP_REGION ?? DEPLOY_DEFAULTS.regions.cloudrun; L4394: } ... L4396: try { L4397: const out = exec("gcloud auth list --filter=status:ACTIVE --format='value(account)' 2>/dev/null"); L4398: return out.trim().length > 0; ... L4406: cliNames: ["gcloud"], L4407: installHint: "https://cloud.google.com/sdk/docs/install", L4408: preflight(ctx) {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L4392

2466package = @reactive-agents/cli; repositoryIdentity = reactive-agents-ts; dependency = @reactive-agents/a2a L2466: } L2467: const { generateAgentCard } = await import("@reactive-agents/a2a"); L2468: const agentCard = generateAgentCard({

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/index.jsView on unpkg · L2466

3983try { L3984: const out = exec("railway whoami 2>/dev/null"); L3985: return out.length > 0; ... L3993: cliNames: ["railway"], L3994: installHint: "npm install -g @railway/cli", L3995: preflight(ctx) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L3983

669try { L670: benchmarks = await import("@reactive-agents/benchmarks"); L671: } catch {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L669

Findings

5 High5 Medium4 Low

HighChild Processdist/index.js

HighShelldist/index.js

HighSame File Env Network Executiondist/index.js

HighCopied Package Dependency Bridgedist/index.js

HighRuntime Package Installdist/index.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/index.jsView file

Lines 555-595javascript

555 if (recipeIdx !== -1 && args[recipeIdx + 1]) {

556 const r = args[recipeIdx + 1];

557 if (!VALID_RECIPES.includes(r)) {

558 console.error(fail(`Invalid recipe: ${r}. Valid options: ${VALID_RECIPES.join(", ")}`));

559 process.exit(1);

560 }

561 recipe = r;

562 }

563 console.log(section("Create Agent"));

564 console.log(info(`Creating agent "${name}" with recipe "${recipe}"...`));

565 const result = generateAgent({

566 name,

567 recipe,

568 targetDir: process.cwd()

569 });

570 console.log(success(`Created: ${result.filePath}`));

571}

572

573// src/commands/dev.ts

574import { existsSync as existsSync3 } from "fs";

575import { join as join4, resolve } from "path";

576import { spawnSync } from "child_process";

577var HELP3 = `

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L575

578 Usage: rax dev [options]

579

580 Run your local agent entrypoint in watch mode.

581

582 Options:

583 --entry <path> Entry file to run (default: src/index.ts)

584 --no-watch Run once without file watching

585 --help Show this help

586`.trimEnd();

587function runDev(args) {

588 if (args.includes("--help") || args.includes("-h")) {

589 console.log(HELP3);

590 return;

591 }

592 let entry = "src/index.ts";

593 let watch = true;

594 for (let i = 0; i < args.length; i++) {

595 const arg = args[i];

Lines 649-689javascript

649 return i >= 0 && i + 1 < args.length ? args[i + 1] : void 0;

650 };

651 const num = (flag) => {

652

Lines 2446-2486javascript

2446 }

2447 banner("rax serve", `Starting A2A server: ${name}`);

2448 console.log(kv("Port", String(port)));

2449 console.log(kv("Provider", `${provider}${model ? ` (${model})` :

Lines 3963-4003javascript

3963

3964// src/templates/railway.ts

3965var railwayJsonTemplate = (agentName) => `{

3966 "$schema": "https://railway.com/railway.schema.json",

3967 "build": {

3968 "builder": "DOCKERFILE",

3969 "dockerfilePath": "Dockerfile"

3970 },

3971 "deploy": {

3972 "startCommand": "",

3973 "healthcheckPath": "/health",

Lines 4372-4412javascript

4372 - "--memory"

4373 - "512Mi"

4374 - "--timeout"

4375 - "300"

4376 - "--allow-unauthenticated"

4377

4378images:

4379 - "gcr.io/${projectId}/raxd-${agentName}"

4380`;

Lines 4648-4688javascript

4648 OLLAMA_BASE_URL: http://ollama:11434

4649 cap_drop:

4650 - ALL

4651 security_opt:

4652 - no-new-privileges

4653 deploy:

4654 resources:

4655 limits: