registry / @testsmith/api-spector-agent / 0.8.5
@testsmith/api-spector-agent@0.8.5
API Spector private runner: monitor internal/local APIs the cloud cannot reach, with no inbound connections.
AI Security Review
scanned 9d ago · by lpm-firewall-aiSource inspection shows a runner configured through operator-provided environment values, with polling and result reporting directed to that configured application. The scanner's execution and network signals are consistent with the bundled API-monitoring functionality; no concrete attack behavior was found.
Static reason
One or more suspicious static signals were detected.
Trigger
An operator starts the CLI after configuring APP_URL and a runner token.
Impact
No confirmed attack surface was established; results include check request and response data sent to the operator-configured application.
Mechanism
The runner polls APP_URL for due checks, executes them, and posts their results to APP_URL.
AI rationale
Source inspection shows a runner configured through operator-provided environment values, with polling and result reporting directed to that configured application. The scanner's execution and network signals are consistent with the bundled API-monitoring functionality; no concrete attack behavior was found.
Network endpoints2
${APP_URL}/api/monitor-runtime/due${APP_URL}/api/monitor-runtime/${m6.id}/result
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points both the CLI and main entrypoint to dist/index.cjs and declares no lifecycle hook.
- The runner reads APP_URL and its runner token from the operator's environment.
- Startup exits unless APP_URL and a runner token are configured.
- The runner polls for monitoring tasks and posts results to endpoints under the configured APP_URL.
- Reported results include sent and received headers and bodies, consistent with the private monitoring runner's stated function.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
Oversized source lightweight scan
Source & flagged code
8 flaggeddist/index.cjsView file
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/index.cjs:
"Authorization",
"Proxy-Authorization",
get baseUrl() {
return this.baseUrl?.origin;
this[kProxyHeaders]["proxy-authorization"] = `Basic ${opts.auth}`;
this[kProxyHeaders]["proxy-authorization"] = opts.token;
this[kProxyHeaders]["proxy-authorization"] = `Basic ${Buffer.from(`${decodeURIComponent(username)}:${decodeURIComponent(password)}`).toString("base64")}`;
const existProxyAuth = headers && Object.keys(headers).find((key) => key.toLowerCase() === "proxy-authorization");
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/index.cjsView on unpkg247}, m7.utcOffset = function() {
L248: return 15 * -Math.round(this.$d.getTimezoneOffset() / 15);
L249: }, m7.diff = function(r64, d9, l9) {
...
L356: * @see DOMParser.SupportedType.isHTML
L357: * @see https://www.iana.org/assignments/media-types/text/html IANA MimeType registration
L358: * @see https://en.wikipedia.org/wiki/HTML Wikipedia
...
L586: /**
L587: * @private
L588: * @param {function (Node):boolean} predicate
...
L993: function _xmlEncoder(c8) {
L994: return c8 == "<" && "<" || c8 == ">" && ">" || c8 == "&" && "&" || c8 == '"' && """ || "&#" + c8.charCodeAt() + ";";
L995: }
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
Findings
4 High6 Medium4 Low
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/index.cjs
HighObfuscated Payload Loaderdist/index.cjs
HighSemantic Analysis Limiteddist/index.cjs
MediumUnsafe Vm Contextdist/index.cjs
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/index.cjs
MediumOversized Cli Entrypointdist/index.cjs
MediumStructural Risk Force Deep Review
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @testsmith/api-spector-agent@0.8.5.
See all versions of @testsmith/api-spector-agent for other recorded verdicts.
- Review the evidence and your use of @testsmith/api-spector-agent@0.8.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.