@superatomai/sdk-node@0.0.19-dsp
Node.js TypeScript SDK for Superatom
AI Security Review
scanned 4mo ago · by lpm-firewall-aiThe scanner's remote-payload claim is not supported by the inspected source, but the exported runtime script-execution facility is a meaningful dangerous capability that requires trusted caller-controlled inputs.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A host application invokes exported `runScript` with a script path.
Impact
An untrusted script path supplied by an integrating application could execute with that application's user privileges and environment.
Mechanism
spawned child process dynamically imports and executes caller-selected script code
AI rationale
The scanner's remote-payload claim is not supported by the inspected source, but the exported runtime script-execution facility is a meaningful dangerous capability that requires trusted caller-controlled inputs.
Evidence
package.jsondist/index.jsdist/userResponse/scripts/script-bootstrap.jsdist/index.d.ts
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- `dist/index.js` exports `runScript` and spawns a Node/tsx subprocess for a runtime `scriptPath`.
- `dist/userResponse/scripts/script-bootstrap.js` dynamically imports that supplied local script and invokes its `getData` export.
- The child inherits `process.env`, so executed scripts receive the host process environment.
Evidence against
- `package.json` has no `preinstall`, `install`, `postinstall`, or uninstall lifecycle hook.
- No `eval` or decoded remote payload execution was found; the flagged `new Function` is a dependency dynamic-import helper.
- No hard-coded exfiltration endpoint, credential harvesting, AI-agent configuration mutation, or destructive package behavior was found.
- Subprocess execution is tied to an explicit runtime script-runner feature with timeout, queue, and IPC handling.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
7 flaggeddist/index.jsView file
54logger: () => logger,
L55: normalizeScriptBody: () => normalizeScriptBody,
L56: openaiLLM: () => openaiLLM,
...
L66:
L67: // src/websocket.ts
L68: var import_ws = __toESM(require("ws"));
...
L923: constructor() {
L924: const envLevel = (process.env.SUPERATOM_LOG_LEVEL || "info").toLowerCase();
L925: if (this.isValidLogLevel(envLevel)) {
...
L1714: const cipher = import_crypto3.default.createCipheriv(this.algorithm, this.encryptionKey, iv);
L1715: let encrypted = cipher.update(payload, "utf8", "base64");
L1716: encrypted += cipher.final("base64");
Critical
Remote Asset Decode Execute
Source fetches a remote non-code asset, decodes its contents, and dynamically executes the decoded payload.
dist/index.jsView on unpkg · L54•Trigger-reachable chain: manifest.main -> dist/index.js
Reachable file contains a blocking source-risk pattern.
Critical
Trigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
dist/index.jsView on unpkg9846// src/userResponse/scripts/script-runner.ts
L9847: var import_child_process = require("child_process");
L9848: var path5 = __toESM(require("path"));
Findings
2 Critical3 High6 Medium4 Low
CriticalRemote Asset Decode Executedist/index.js
CriticalTrigger Reachable Dangerous Capabilitydist/index.js
HighChild Processdist/index.js
HighShell
HighEvaldist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSecret PatternREADME.md
MediumSecret PatternREADME.md
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @superatomai/sdk-node@0.0.19-dsp.
See all versions of @superatomai/sdk-node for other recorded verdicts.
- Review the evidence and your use of @superatomai/sdk-node@0.0.19-dsp before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.