registry / @synkro-sh/cli / 1.7.38

@synkro-sh/cli@1.7.38

⚠ Under review

Catch risky code before your AI coding agent ships it. Reviews every edit and shell command with full context.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 358 KB of source, external domains: 127.0.0.1, api.cursor.com, api.github.com, api.synkro.sh, bun.sh, cli.github.com, developers.openai.com, docs.claude.com, github.com

Source & flagged code

7 flagged · loading source

dist/bootstrap.jsView file

21import { join } from "path"; L22: import { execFileSync, execSync } from "child_process"; L23: function which(cmd2) { ... L41: const agents = []; L42: const home = homedir(); L43: const claudeBinary = which("claude"); ... L56: const cursorConfigDir = join(home, ".cursor"); L57: const cursorApp = process.platform === "darwin" && existsSync("/Applications/Cursor.app"); L58: if (cursorBinary || cursorApp || existsSync(cursorConfigDir)) { ... L92: const raw = readFileSync(path, "utf-8"); L93: return JSON.parse(raw); L94: } catch (err) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/bootstrap.jsView on unpkg · L21

21Trigger-reachable chain: manifest.bin -> dist/bootstrap.js L21: import { join } from "path"; L22: import { execFileSync, execSync } from "child_process"; L23: function which(cmd2) { ... L41: const agents = []; L42: const home = homedir(); L43: const claudeBinary = which("claude"); ... L56: const cursorConfigDir = join(home, ".cursor"); L57: const cursorApp = process.platform === "darwin" && existsSync("/Applications/Cursor.app"); L58: if (cursorBinary || cursorApp || existsSync(cursorConfigDir)) { ... L92: const raw = readFileSync(path, "utf-8"); L93: return JSON.parse(raw); L94: } catch (err) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bootstrap.jsView on unpkg · L21

21import { join } from "path"; L22: import { execFileSync, execSync } from "child_process"; L23: function which(cmd2) {

High

Child Process

Package source references child process execution.

dist/bootstrap.jsView on unpkg · L21

1486SYNKRO_SHA: \${{ inputs.sha || github.event.pull_request.head.sha }} L1487: SYNKRO_GATEWAY_URL: \${{ vars.SYNKRO_GATEWAY_URL || 'https://api.synkro.sh' }} L1488: `; ... L1494: import { existsSync as existsSync6, mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "fs"; L1495: import { execSync as execSync2 } from "child_process"; L1496: import { join as join4 } from "path"; ... L1499: input: value, L1500: env: { ...process.env, GH_TOKEN: token }, L1501: stdio: ["pipe", "ignore", "pipe"],

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bootstrap.jsView on unpkg · L1486

21import { join } from "path"; L22: import { execFileSync, execSync } from "child_process"; L23: function which(cmd2) { ... L41: const agents = []; L42: const home = homedir(); L43: const claudeBinary = which("claude"); ... L56: const cursorConfigDir = join(home, ".cursor"); L57: const cursorApp = process.platform === "darwin" && existsSync("/Applications/Cursor.app"); L58: if (cursorBinary || cursorApp || existsSync(cursorConfigDir)) { ... L92: const raw = readFileSync(path, "utf-8"); L93: return JSON.parse(raw); L94: } catch (err) {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bootstrap.jsView on unpkg · L21

21import { join } from "path"; L22: import { execFileSync, execSync } from "child_process"; L23: function which(cmd2) { ... L91: try { L92: const raw = readFileSync(path, "utf-8"); L93: return JSON.parse(raw); ... L1389: // cli/api/projects.ts L1390: function setApiBaseUrl(url) { L1391: API_URL = url;

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bootstrap.jsView on unpkg · L21

21import { join } from "path"; L22: import { execFileSync, execSync } from "child_process"; L23: function which(cmd2) { ... L41: const agents = []; L42: const home = homedir(); L43: const claudeBinary = which("claude"); ... L56: const cursorConfigDir = join(home, ".cursor"); L57: const cursorApp = process.platform === "darwin" && existsSync("/Applications/Cursor.app"); L58: if (cursorBinary || cursorApp || existsSync(cursorConfigDir)) { ... L92: const raw = readFileSync(path, "utf-8"); L93: return JSON.parse(raw); L94: } catch (err) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bootstrap.jsView on unpkg · L21

Findings

2 Critical5 High4 Medium5 Low

CriticalCredential Exfiltrationdist/bootstrap.js

CriticalTrigger Reachable Dangerous Capabilitydist/bootstrap.js

HighChild Processdist/bootstrap.js

HighShell

HighSame File Env Network Executiondist/bootstrap.js

HighSandbox Evasion Gated Capabilitydist/bootstrap.js

HighRemote Agent Bridgedist/bootstrap.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/bootstrap.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/bootstrap.jsView file

Lines 1-41javascript

1#!/usr/bin/env node

2var __defProp = Object.defineProperty;

3var __getOwnPropNames = Object.getOwnPropertyNames;

4var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

5 get: (a, b) => (typeof require !== "undefined" ? require : a)[b]

6}) : x)(function(x) {

7 if (typeof require !== "undefined") return require.apply(this, arguments);

8 throw Error('Dynamic require of "' + x + '" is not supported');

9});

10var __esm = (fn, res) => function __init() {

11 return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;

12};

13var __export = (target, all) => {

14 for (var name in all)

15 __defProp(target, name, { get: all[name], enumerable: true });

16};

17

18// cli/installer/agentDetect.ts

19import { existsSync } from "fs";

20import { homedir } from "os";

21import { join } from "path";

22import { execFileSync, execSync } from "child_process";

23function which(cmd2) {

High

Child Process

Package source references child process execution.

dist/bootstrap.jsView on unpkg · L21

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/bootstrap.jsView on unpkg · L21

24 try {

25 const result = execSync(`which ${cmd2}`, { encoding: "utf-8" }).trim();

26 return result || void 0;

27 } catch {

28 return void 0;

29 }

30}

31function getVersion(cmd2) {

32 try {

33 const result = execFileSync(cmd2, ["--version"], { encoding: "utf-8", timeout: 5e3 }).trim();

34 const line = result.split("\n")[0];

35 return line.replace(/\s*\(Claude Code\)/, "");

36 } catch {

37 return void 0;

38 }

39}

40function detectAgents() {

41 const agents = [];

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/bootstrap.jsView on unpkg · L21

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/bootstrap.jsView on unpkg · L21

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/bootstrap.jsView on unpkg · L21

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/bootstrap.jsView on unpkg · L21

Lines 1466-1506javascript

1466 id: cache-npm-global

1467 uses: actions/cache@v4

1468 with:

1469 path: ~/.npm-global

1470 key: synkro-cli-\${{ runner.os }}-v1

1471

1472 -