registry / @slashfi/agents-sdk / 0.91.0

@slashfi/agents-sdk@0.91.0

SDK for building AI agents with tool definitions and JSON-RPC servers

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 135 file(s), 1.84 MB of source, external domains: 127.0.0.1, api.example.com, api.x.com, example.com, mcp.notion.com, registry.slash.com, registry.test, slack.com, twin.slash.com, vault.example.com

Source & flagged code

4 flagged

dist/adk.jsView file

Lines 325-365javascript

325 : username

326 ? { username, ...(password !== undefined && { password }) }

327 : { apiKey: apiKey, ...(header && { header }) };

328 const updated = await adk.registry.auth(name, credential);

329 if (!updated) {

330 console.error(`Registry not found: ${name}`);

331 process.exit(1);

332 }

333 console.log(`\x1b[32m✓\x1b[0m Auth saved for ${name}`);

334 break;

335 }

336 // Auto-resolve: OAuth (when registry advertised an AS) or local

337 // credential form otherwise. Mirrors `adk ref auth` UX. Always force

338 // a fresh flow — invoking the command implies the existing creds

339 // aren't trusted, so skip the "already looks valid" short-circuit.

340 try {

341 const result = await adk.registry.authLocal(name, {

342 force: true,

343 onAuthorizeUrl: (url) => {

344 console.log(`\nOpen this URL to authenticate:\n\n ${url}\n`);

345 const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";

346 import("node:child_process").then(({ exec }) => exec(`${opener} "${url}"`)).catch(() => { });

347 console.log("Waiting ...");

High

Child Process

Package source references child process execution.

dist/adk.jsView on unpkg · L345

348 },

349 });

350 if (result.complete) {

351 console.log(`\x1b[32m✓\x1b[0m Auth complete for ${name}`);

352 }

353 }

354 catch (err) {

355 if (err instanceof AdkError)

356 throw err;

357 console.error(`Auth failed: ${err instanceof Error ? err.message : String(err)}`);

358 process.exit(1);

359 }

360 break;

361 }

362 default:

363 console.error(`Unknown registry operation: ${op}`);

364 console.error("Operations: add, remove, list, browse, inspect, test, auth");

365 process.exit(1);

dist/materialize.jsView file

Lines 356-396javascript

356 *

357 * Include in tsconfig or add: /// <reference path="~/.adk/adk.d.ts" />

358 */

359export function generateRootTypes(configDir, syncResult) {

360 const lines = [

361

dist/adk-check.jsView file

Lines 200-240javascript

200 const tmpFile = join(cwd, ".adk_run.ts");

201 writeRunWrapper(tmpFile, PREAMBLE_RUN, userCode);

202 const runResult = spawnSync("bun", ["run", tmpFile], {

203 cwd,

204 stdio:

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1214 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Source & flagged code

4 flagged · loading source

dist/adk.jsView file

345const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open"; L346: import("node:child_process").then(({ exec }) => exec(`${opener} "${url}"`)).catch(() => { }); L347: console.log("Waiting ...");

High

Child Process

Package source references child process execution.

dist/adk.jsView on unpkg · L345

dist/materialize.jsView file

376try { L377: JSON.parse(require("node:fs").readFileSync(agentJsonPath, "utf-8")); L378: typedRefs.push({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/materialize.jsView on unpkg · L376

dist/adk-check.jsView file

220* 1. tsgo binary (fastest — native TypeScript compiler) L221: * 2. npx tsgo (if installed as a package) L222: * 3. tsc binary (standard TypeScript compiler, verified via --version) ... L228: // 1. tsgo binary L229: const tsgo = spawnSync("which", ["tsgo"], { stdio: "pipe" }); L230: if (tsgo.status === 0)

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/adk-check.jsView on unpkg · L220

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1214 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Findings

3 High5 Medium5 Low

HighChild Processdist/adk.js

HighShell

HighRuntime Package Installdist/adk-check.js

MediumDynamic Requiredist/materialize.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperinstall.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/adk.jsView file

Lines 325-365javascript

325 : username

326 ? { username, ...(password !== undefined && { password }) }

327 : { apiKey: apiKey, ...(header && { header }) };

328 const updated = await adk.registry.auth(name, credential);

329 if (!updated) {

330 console.error(`Registry not found: ${name}`);

331 process.exit(1);

332 }

333 console.log(`\x1b[32m✓\x1b[0m Auth saved for ${name}`);

334 break;

335 }

336 // Auto-resolve: OAuth (when registry advertised an AS) or local

337 // credential form otherwise. Mirrors `adk ref auth` UX. Always force

338 // a fresh flow — invoking the command implies the existing creds

339 // aren't trusted, so skip the "already looks valid" short-circuit.

340 try {

341 const result = await adk.registry.authLocal(name, {

342 force: true,

343 onAuthorizeUrl: (url) => {

344 console.log(`\nOpen this URL to authenticate:\n\n ${url}\n`);

345 const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";

346 import("node:child_process").then(({ exec }) => exec(`${opener} "${url}"`)).catch(() => { });

347 console.log("Waiting ...");

High

Child Process

Package source references child process execution.

dist/adk.jsView on unpkg · L345

348 },

349 });

350 if (result.complete) {

351 console.log(`\x1b[32m✓\x1b[0m Auth complete for ${name}`);

352 }

353 }

354 catch (err) {

355 if (err instanceof AdkError)

356 throw err;

357 console.error(`Auth failed: ${err instanceof Error ? err.message : String(err)}`);

358 process.exit(1);

359 }

360 break;

361 }

362 default:

363 console.error(`Unknown registry operation: ${op}`);

364 console.error("Operations: add, remove, list, browse, inspect, test, auth");

365 process.exit(1);

dist/materialize.jsView file

Lines 356-396javascript

356 *

357 * Include in tsconfig or add: /// <reference path="~/.adk/adk.d.ts" />

358 */

359export function generateRootTypes(configDir, syncResult) {

360 const lines = [

361

dist/adk-check.jsView file

Lines 200-240javascript

200 const tmpFile = join(cwd, ".adk_run.ts");

201 writeRunWrapper(tmpFile, PREAMBLE_RUN, userCode);

202 const runResult = spawnSync("bun", ["run", tmpFile], {

203 cwd,

204 stdio:

install.shView file

•path = install.sh kind = build_helper sizeBytes = 1214 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg