registry / @testsmith/api-spector-agent / 0.6.1
@testsmith/api-spector-agent@0.6.1
API Spector private runner: monitor internal/local APIs the cloud cannot reach, with no inbound connections.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInstall metadata has no lifecycle scripts, and the only runtime network client sends the operator-provided token to the operator-provided APP_URL. Bundled Electron and vm script execution are unused or product-aligned and do not form a concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
The user executes the api-spector-agent bin with APP_URL and AGENT_TOKEN or RUNTIME_TOKEN set. There is no install-time hook.
Impact
Traffic and credentials stay on the caller-chosen cloud. No unconsented exfiltration, persistence, or agent control-surface write was found.
Mechanism
main polls APP_URL/api/monitor-runtime/due with the caller token and posts each check result to APP_URL/api/monitor-runtime/{id}/result.
AI rationale
Install metadata has no lifecycle scripts, and the only runtime network client sends the operator-provided token to the operator-provided APP_URL. Bundled Electron and vm script execution are unused or product-aligned and do not form a concrete attack.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json publishes a CLI named api-spector-agent whose bin and main are dist/index.cjs, with no preinstall, install, or postinstall scripts.
- The agent reads APP_URL, AGENT_TOKEN, and optional RUNTIME_TOKEN from the process environment and refuses to start unless a URL and a token are present.
- Bearer or runtime-token headers are attached only to fetch calls under that caller-supplied APP_URL for the due-monitor feed and result posts.
Evidence against
- A bundled copy of Electron's installer uses spawnSync on install.js, but that path runs only when an in-memory secret store entry exists, and nothing in this package writes that store.
- Due checks can run pre/post scripts in a vm sandbox; that matches the documented private-runner product and is activated only after the user starts the agent against their own cloud.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
6 flaggeddist/index.cjsView file
247}, m76.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m76.diff = function(r53, d75, l76) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L578: /**
L579: * @private
L580: * @param {function (Node):boolean} predicate
...
L915: function _xmlEncoder(c70) {
L916: return c70 == "<" && "<" || c70 == ">" && ">" || c70 == "&" && "&" || c70 == '"' && """ || "&#" + c70.charCodeAt() + ";";
L917: }
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L247•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.cjsView on unpkg247}, m76.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m76.diff = function(r53, d75, l76) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L578: /**
L579: * @private
L580: * @param {function (Node):boolean} predicate
...
L915: function _xmlEncoder(c70) {
L916: return c70 == "<" && "<" || c70 == ">" && ">" || c70 == "&" && "&" || c70 == '"' && """ || "&#" + c70.charCodeAt() + ";";
L917: }
Findings
2 High6 Medium4 Low
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limiteddist/index.cjs
MediumUnsafe Vm Contextdist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @testsmith/api-spector-agent@0.6.1.
See all versions of @testsmith/api-spector-agent for other recorded verdicts.
- Review the evidence and your use of @testsmith/api-spector-agent@0.6.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.