registry / @runuai/host / 0.8.1

@runuai/host@0.8.1

Uai host — runs ephemeral AI coding tasks in Docker on a machine you control.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 56 file(s), 469 KB of source, external domains: 127.0.0.1, github.com, host.docker.internal, www.apple.com

Source & flagged code

4 flagged

bin/uai-host.mjsView file

Lines 1-15javascript

1#!/usr/bin/env node

2/**

3 * Published entrypoint for `@runuai/host` (ADR-032).

4 *

5 * The host ships TypeScript source and runs it through tsx — no build step —

6 * so every runtime path (drizzle migrations, scripts/agent/*.sh, the

7 * images/standard build context) resolves off its source file exactly as in

8 * dev. This shim registers tsx's ESM loader, then hands off to src/cli.ts.

9 * argv passes straight through: src/cli.ts reads process.argv.slice(2).

10 */

11import { register } from "tsx/esm/api";

13register();

14await import(new URL("../src/cli.ts", import.meta.url).href);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/uai-host.mjsView on unpkg · L13

scripts/install/darwin.tsView file

Lines 1-24typescript

1/**

2 * macOS service install via launchd (ADR-028).

3 *

4 * Writes ~/Library/LaunchAgents/com.runuai.host.plist (KeepAlive + RunAtLoad),

5 * logs to ~/Library/Logs/Uai/, loads with `launchctl bootstrap gui/<uid>`.

6 * The service's PATH is the operator's PATH at install time (so node/pnpm/

7 * docker/git resolve); .env.local is loaded by the host process itself.

8 */

10import { mkdirSync, rmSync, writeFileSync } from

scripts/agent/task-status.shView file

•path = scripts/agent/task-status.sh kind = build_helper sizeBytes = 1752 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/agent/task-status.shView on unpkg

lib/orchestrator.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = @runuai/host@0.8.0 matchedIdentity = npm:QHJ1bnVhaS9ob3N0:0.8.0 similarity = 0.946 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

lib/orchestrator.tsView on unpkg

Source & flagged code

4 flagged · loading source

bin/uai-host.mjsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code