registry / @sherwoodagent/cli / 0.72.0

@sherwoodagent/cli@0.72.0

CLI for agent-managed investment funds — onchain DeFi funds with XMTP chat

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 41 file(s), 1.15 MB of source, external domains: api.alternative.me, api.binance.com, api.coingecko.com, api.dexscreener.com, api.hyperliquid.xyz, api.llama.fi, api.messari.io, api.nansen.ai, api.twitter.com, api.venice.ai, app.sherwood.sh, base-rpc.publicnode.com, basescan.org, coins.llama.fi, developers.uniswap.org, docs.venice.ai, eips.ethereum.org, explorer.testnet.chain.robinhood.com, fapi.binance.com, hyperliquid.cloud.blockscout.com, mainnet.base.org, merkl.angle.money, robinhoodchain.blockscout.com, rpc.hyperliquid.xyz, rpc.mainnet.chain.robinhood.com, rpc.testnet.chain.robinhood.com, sherwood.mypinata.cloud, sherwood.sh, spectator.sherwood.sh, stablecoins.llama.fi, testnet.app.sherwood.sh, trade-api.gateway.uniswap.org, www.sherwood.sh, yields.llama.fi

Source & flagged code

4 flagged

package.jsonView file

Lines 12-52json

12 ],

13 "publishConfig": {

14 "access": "public"

15 },

16 "repository": {

17 "type": "git",

18 "url": "https://github.com/sherwoodagent/sherwood.git",

19 "directory": "cli"

20 },

21 "license": "MIT",

22 "scripts": {

23 "prepublishOnly": "npm run build",

24 "build": "tsup",

25 "dev": "tsx src/index.ts",

26 "lint": "eslint src/",

27 "typecheck": "tsc --noEmit",

28 "test": "vitest run",

29 "test:unit": "vitest run --config vitest.config.unit.ts",

30 "test:integration": "vitest run --config vitest.config.integration.ts",

31 "test:watch": "vitest",

32 "postinstall": "node scripts/pin-xmtp-bindings.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "dependencies": {

35 "@anthropic-ai/sdk": "^0.90.0",

36 "@inquirer/prompts": "^8.3.2",

37 "@sherwoodagent/sdk": "file:../sdk",

38 "@x402/evm": "^2.7.0",

39 "@x402/fetch": "^2.7.0",

40 "@xmtp/node-sdk": "^6.0.0",

41 "agent0-sdk": "^1.7.0",

42 "chalk": "^5.3.0",

43 "commander": "^12.1.0",

44 "dotenv": "^16.4.0",

45 "ora": "^8.1.0",

46 "viem": "^2.21.0",

47 "ws": "^8.20.0",

48 "yaml": "2.9.0"

49 },

50 "overrides": {

51 "@xmtp/node-bindings": "1.10.0-dev.97e86c6"

52 },

dist/cron-QMLRWDJG.jsView file

Lines 1-21javascript

1// src/lib/cron.ts

2import { execFileSync } from "child_process";

3var _isOpenClaw = null;

High

Child Process

Package source references child process execution.

dist/cron-QMLRWDJG.jsView on unpkg · L1

4function isOpenClaw() {

5 if (_isOpenClaw !== null)

dist/agent-6OJKQVEG.jsView file

Lines 49-89javascript

49// src/providers/data/defillama.ts

50var DefiLlamaProvider = class {

51 info() {

52 return {

53 name: "DefiLlama",

54 type: "research",

55 capabilities: [

56 "protocol-tvl",

scripts/pin-xmtp-bindings.cjsView file

Lines 27-67javascript

27 * — `npm dedupe` won't collapse it because the pre-release fails the

28 * SDK's strict `1.10.0` dep check. Node's `require()` from inside

29 * @xmtp/node-sdk then resolves the nested glibc-2.38 binding before

30 * walking up to the hoisted dev one.

31 *

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/pin-xmtp-bindings.cjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/cron-QMLRWDJG.jsView file

1// src/lib/cron.ts L2: import { execFileSync } from "child_process"; L3: var _isOpenClaw = null;

High

Child Process

Package source references child process execution.

dist/cron-QMLRWDJG.jsView on unpkg · L1

dist/agent-6OJKQVEG.jsView file

69try { L70: const res = await fetch(`https://api.llama.fi/tvl/${encodeURIComponent(protocol)}`); L71: if (!res.ok) throw new Error(`DefiLlama tvl error: ${res.status} ${res.statusText}`); L72: const data = await res.json(); L73: return data; ... L171: constructor() { L172: this.cacheDir = join(homedir(), ".sherwood", "agent", "cache", "coingecko"); L173: this.apiKey = process.env.COINGECKO_API_KEY; L174: if (this.apiKey) { ... L281: async getPrice(ids, vsCurrencies = ["usd"]) { L282: const params = new URLSearchParams({ L283: ids: ids.join(","),

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/agent-6OJKQVEG.jsView on unpkg · L69

scripts/pin-xmtp-bindings.cjsView file

47L48: const { execSync } = require("node:child_process"); L49: const fs = require("node:fs"); ... L55: `cd $(dirname $(readlink -f $(which sherwood)))/../lib/node_modules/@sherwoodagent/cli && ` + L56: `npm install --no-save --force ${PINNED}`; L57:

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/pin-xmtp-bindings.cjsView on unpkg · L47

Findings

4 High3 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/cron-QMLRWDJG.js

HighShell

HighRuntime Package Installscripts/pin-xmtp-bindings.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/agent-6OJKQVEG.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

package.jsonView file

Lines 12-52json

12 ],

13 "publishConfig": {

14 "access": "public"

15 },

16 "repository": {

17 "type": "git",

18 "url": "https://github.com/sherwoodagent/sherwood.git",

19 "directory": "cli"

20 },

21 "license": "MIT",

22 "scripts": {

23 "prepublishOnly": "npm run build",

24 "build": "tsup",

25 "dev": "tsx src/index.ts",

26 "lint": "eslint src/",

27 "typecheck": "tsc --noEmit",

28 "test": "vitest run",

29 "test:unit": "vitest run --config vitest.config.unit.ts",

30 "test:integration": "vitest run --config vitest.config.integration.ts",

31 "test:watch": "vitest",

32 "postinstall": "node scripts/pin-xmtp-bindings.cjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L32

33 },

34 "dependencies": {

35 "@anthropic-ai/sdk": "^0.90.0",

36 "@inquirer/prompts": "^8.3.2",

37 "@sherwoodagent/sdk": "file:../sdk",

38 "@x402/evm": "^2.7.0",

39 "@x402/fetch": "^2.7.0",

40 "@xmtp/node-sdk": "^6.0.0",

41 "agent0-sdk": "^1.7.0",

42 "chalk": "^5.3.0",

43 "commander": "^12.1.0",

44 "dotenv": "^16.4.0",

45 "ora": "^8.1.0",

46 "viem": "^2.21.0",

47 "ws": "^8.20.0",

48 "yaml": "2.9.0"

49 },

50 "overrides": {

51 "@xmtp/node-bindings": "1.10.0-dev.97e86c6"

52 },

dist/cron-QMLRWDJG.jsView file

Lines 1-21javascript

1// src/lib/cron.ts

2import { execFileSync } from "child_process";

3var _isOpenClaw = null;

High

Child Process

Package source references child process execution.

dist/cron-QMLRWDJG.jsView on unpkg · L1

4function isOpenClaw() {

5 if (_isOpenClaw !== null)

dist/agent-6OJKQVEG.jsView file

Lines 49-89javascript

49// src/providers/data/defillama.ts

50var DefiLlamaProvider = class {

51 info() {

52 return {

53 name: "DefiLlama",

54 type: "research",

55 capabilities: [

56 "protocol-tvl",

scripts/pin-xmtp-bindings.cjsView file

Lines 27-67javascript

27 * — `npm dedupe` won't collapse it because the pre-release fails the

28 * SDK's strict `1.10.0` dep check. Node's `require()` from inside

29 * @xmtp/node-sdk then resolves the nested glibc-2.38 binding before

30 * walking up to the hoisted dev one.

31 *