registry / @testsmith/api-spector-agent / 0.7.0
@testsmith/api-spector-agent@0.7.0
API Spector private runner: monitor internal/local APIs the cloud cannot reach, with no inbound connections.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no lifecycle hook and its active behavior requires user-supplied configuration. Its network polling and sandboxed monitor execution match the stated runner function without concrete malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the package with the required service URL and token.
Impact
No unconsented install-time execution, persistence, or confirmed credential exfiltration was found.
Mechanism
It polls the configured service for monitor work and runs monitor scripts in a VM sandbox.
AI rationale
The package has no lifecycle hook and its active behavior requires user-supplied configuration. Its network polling and sandboxed monitor execution match the stated runner function without concrete malicious behavior.
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the bundled program as a bin and main entrypoint and has no lifecycle scripts.
- The entrypoint requires an operator-provided service URL and authentication token before starting.
- The runner polls only a route derived from that configured service URL.
- Monitor scripts run in a restricted VM context with an explicit sandbox object.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
Oversized source lightweight scan
dist/index.cjs5.31 MB file, sampled 256 KB
Filesystem
Source & flagged code
6 flaggeddist/index.cjsView file
247}, m76.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m76.diff = function(r53, d75, l76) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L578: /**
L579: * @private
L580: * @param {function (Node):boolean} predicate
...
L915: function _xmlEncoder(c70) {
L916: return c70 == "<" && "<" || c70 == ">" && ">" || c70 == "&" && "&" || c70 == '"' && """ || "&#" + c70.charCodeAt() + ";";
L917: }
High
Obfuscated Payload Loader
Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/index.cjsView on unpkg · L247•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/index.cjsView on unpkg247}, m76.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m76.diff = function(r53, d75, l76) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L578: /**
L579: * @private
L580: * @param {function (Node):boolean} predicate
...
L915: function _xmlEncoder(c70) {
L916: return c70 == "<" && "<" || c70 == ">" && ">" || c70 == "&" && "&" || c70 == '"' && """ || "&#" + c70.charCodeAt() + ";";
L917: }
Findings
2 High6 Medium4 Low
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limiteddist/index.cjs
MediumUnsafe Vm Contextdist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @testsmith/api-spector-agent@0.7.0.
See all versions of @testsmith/api-spector-agent for other recorded verdicts.
- Review the evidence and your use of @testsmith/api-spector-agent@0.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.