@testsmith/api-spector-agent@0.4.8
API Spector private runner: monitor internal/local APIs the cloud cannot reach, with no inbound connections.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe source implements unrestricted forwarding of environment-backed credentials from remotely supplied monitor definitions to remotely supplied URLs. This is a concrete dangerous capability, but activation requires explicit operator configuration and the inspected package has no install-time trigger.
Static reason
One or more suspicious static signals were detected.
Trigger
An operator starts the agent with its service URL and token, then the service returns a monitor.
Impact
A service operator can conditionally expose an agent host’s environment-backed credentials to an arbitrary monitor destination.
Mechanism
The agent polls for monitors, resolves secret references from environment variables, adds authentication headers, and fetches the monitor URL without a destination allowlist.
AI rationale
The source implements unrestricted forwarding of environment-backed credentials from remotely supplied monitor definitions to remotely supplied URLs. This is a concrete dangerous capability, but activation requires explicit operator configuration and the inspected package has no install-time trigger.
Evidence
dist/index.cjs
Network endpoints2
${APP_URL}/api/monitor-runtime/due${APP_URL}/api/monitor-runtime/${m75.id}/result
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes its bundled agent as both its command and main entrypoint, with no lifecycle hook declared.
- The running agent polls a caller-configured service for monitor definitions.
- A monitor-supplied secret reference can resolve an arbitrary process environment variable.
- Resolved authentication headers are attached to a request sent to the monitor’s final URL.
Evidence against
- The package has no automatic install lifecycle hook.
- The controlling service URL and agent credentials must be supplied by the operator.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
Oversized source lightweight scan
Source & flagged code
6 flaggeddist/index.cjsView file
247}, m76.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m76.diff = function(r53, d75, l76) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L578: /**
L579: * @private
L580: * @param {function (Node):boolean} predicate
...
L915: function _xmlEncoder(c70) {
L916: return c70 == "<" && "<" || c70 == ">" && ">" || c70 == "&" && "&" || c70 == '"' && """ || "&#" + c70.charCodeAt() + ";";
L917: }
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L247•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.cjsView on unpkg247}, m76.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m76.diff = function(r53, d75, l76) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L578: /**
L579: * @private
L580: * @param {function (Node):boolean} predicate
...
L915: function _xmlEncoder(c70) {
L916: return c70 == "<" && "<" || c70 == ">" && ">" || c70 == "&" && "&" || c70 == '"' && """ || "&#" + c70.charCodeAt() + ";";
L917: }
Findings
2 High7 Medium3 Low
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limiteddist/index.cjs
MediumUnsafe Vm Contextdist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @testsmith/api-spector-agent@0.4.8.
See all versions of @testsmith/api-spector-agent for other recorded verdicts.
- Review the evidence and your use of @testsmith/api-spector-agent@0.4.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.