registry / @the-open-engine/zeroshot / 6.5.0

@the-open-engine/zeroshot@6.5.0

Multi-agent orchestration engine for Claude, Codex, and Gemini

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 224 file(s), 1.81 MB of source, external domains: api.linear.app, cli.github.com, company.atlassian.net, dev.azure.com, docker.com, docs.microsoft.com, github.com, gitlab.com, gitlab.company.com, kiro.dev, linear.app, opencode.ai, openrouter.ai, registry.npmjs.org, yourcompany.atlassian.net

Source & flagged code

5 flagged

package.jsonView file

Lines 30-70json

30 "@semantic-release/release-notes-generator",

31 [

32 "@semantic-release/npm",

33 {

34 "npmPublish": true

35 }

36 ],

37 "@semantic-release/github"

38 ]

39 },

40 "scripts": {

41 "pretest": "npm run build:agent-cli-provider",

42 "test": "node tests/run-tests.js",

43 "test:unit": "node tests/run-tests.js",

44 "test:e2e": "mocha 'tests/e2e/**/*.test.js' --timeout 120000",

45 "test:e2e:docker": "bash tests/integration/e2e-isolation-and-auto.test.sh",

46 "test:slow": "mocha 'tests/integration/**/*.test.js' 'tests/providers/**/*.test.js' --timeout 180000",

47 "test:all": "npm run test && npm run test:e2e && npm run test:slow",

48 "test:coverage": "c8 npm run test:unit",

49 "test:coverage:report": "c8 --reporter=html npm run test:unit && echo 'Coverage report generated at coverage/index.html'",

50 "postinstall": "node scripts/fix-node-pty-permissions.js && node scripts/check-path.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L50

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L50

51 "start": "node cli/index.js",

52 "typecheck": "tsc --noEmit",

53 "typecheck:agent-cli-provider": "tsc --project tsconfig.agent-cli-provider.json",

54 "lint:agent-cli-provider": "eslint \"src/agent-cli-provider/**/*.ts\" \"tests/agent-cli-provider/**/*.ts\"",

55 "build:agent-cli-provider": "tsc --project tsconfig.agent-cli-provider.build.json",

56 "test:agent-cli-provider": "node --test tests/agent-cli-provider/*.test.js",

57 "test:providers:live": "npm run build:agent-cli-provider && node scripts/live-provider-smoke.js",

58 "check:agent-cli-provider": "npm run check:agent-cli-provider:ci",

59 "check:agent-cli-provider:ci": "npm run typecheck:agent-cli-provider && npm run lint:agent-cli-provider && npm run build:agent-cli-provider && npm run test:agent-cli-provider",

60 "dev:link": "npm link",

61 "lint": "eslint .",

62 "lint:fix": "eslint . --fix",

63 "validate:templates": "node scripts/validate-templates.js",

64 "format": "prettier --write .",

65 "format:check": "prettier --check .",

66 "deadcode": "ts-prune --skip node_modules",

67 "deadcode:files": "unimported",

68 "deadcode:deps": "depcheck",

69 "deadcode:all": "npm run deadcode && npm run deadcode:files && npm run deadcode:deps",

70 "dupcheck": "jscpd src/ --min-lines 5 --min-tokens 50 --threshold 5",

src/logic-engine.jsView file

Lines 1-28javascript

1/**

2 * LogicEngine - JavaScript sandbox for agent decision logic

3 *

4 * Provides:

5 * - Isolated VM for executing agent trigger logic

6 * - Timeout enforcement (1 second)

7 * - Ledger API access for queries

8 * - Helper functions for common patterns

9 * - Sandbox security (no fs, network, child_process)

10 */

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/logic-engine.jsView on unpkg · L8

cli/index.jsView file

Lines 101-141javascript

101 * Safe print - routes through statusFooter when active to prevent garbling

102 * @param {...any} args - Arguments to print (like console.log)

103 */

104function safePrint(...args) {

105 const text = args.map

cluster-hooks/block-dangerous-git.pyView file

•path = cluster-hooks/block-dangerous-git.py kind = build_helper sizeBytes = 4915 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cluster-hooks/block-dangerous-git.pyView on unpkg

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty-permissions.js && node scripts/check-path.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty-permissions.js && node scripts/check-path.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/logic-engine.jsView file

8* - Helper functions for common patterns L9: * - Sandbox security (no fs, network, child_process) L10: */ ... L139: * Build sandbox context with APIs and helpers L140: * @private L141: */

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/logic-engine.jsView on unpkg · L8

cli/index.jsView file

121} else { L122: process.stdout.write(text); L123: } ... L178: // Package root directory (for resolving default config paths) L179: const PACKAGE_ROOT = path.resolve(__dirname, '..'); L180: ... L226: requireGit: options.worktree, L227: quiet: process.env.ZEROSHOT_DAEMON === '1', L228: provider: providerOverride, ... L294: async function spawnDetachedCluster(options, clusterId, stdinText) { L295: const { spawn } = require('child_process'); L296: const logFd = createDaemonLogFile(clusterId);

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli/index.jsView on unpkg · L121

cluster-hooks/block-dangerous-git.pyView file

•path = cluster-hooks/block-dangerous-git.py kind = build_helper sizeBytes = 4915 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cluster-hooks/block-dangerous-git.pyView on unpkg

Findings

1 High7 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumUnsafe Vm Contextsrc/logic-engine.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencecli/index.js

MediumShips Build Helpercluster-hooks/block-dangerous-git.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

package.jsonView file

Lines 30-70json

30 "@semantic-release/release-notes-generator",

31 [

32 "@semantic-release/npm",

33 {

34 "npmPublish": true

35 }

36 ],

37 "@semantic-release/github"

38 ]

39 },

40 "scripts": {

41 "pretest": "npm run build:agent-cli-provider",

42 "test": "node tests/run-tests.js",

43 "test:unit": "node tests/run-tests.js",

44 "test:e2e": "mocha 'tests/e2e/**/*.test.js' --timeout 120000",

45 "test:e2e:docker": "bash tests/integration/e2e-isolation-and-auto.test.sh",

46 "test:slow": "mocha 'tests/integration/**/*.test.js' 'tests/providers/**/*.test.js' --timeout 180000",

47 "test:all": "npm run test && npm run test:e2e && npm run test:slow",

48 "test:coverage": "c8 npm run test:unit",

49 "test:coverage:report": "c8 --reporter=html npm run test:unit && echo 'Coverage report generated at coverage/index.html'",

50 "postinstall": "node scripts/fix-node-pty-permissions.js && node scripts/check-path.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L50

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L50

51 "start": "node cli/index.js",

52 "typecheck": "tsc --noEmit",

53 "typecheck:agent-cli-provider": "tsc --project tsconfig.agent-cli-provider.json",

54 "lint:agent-cli-provider": "eslint \"src/agent-cli-provider/**/*.ts\" \"tests/agent-cli-provider/**/*.ts\"",

55 "build:agent-cli-provider": "tsc --project tsconfig.agent-cli-provider.build.json",

56 "test:agent-cli-provider": "node --test tests/agent-cli-provider/*.test.js",

57 "test:providers:live": "npm run build:agent-cli-provider && node scripts/live-provider-smoke.js",

58 "check:agent-cli-provider": "npm run check:agent-cli-provider:ci",

59 "check:agent-cli-provider:ci": "npm run typecheck:agent-cli-provider && npm run lint:agent-cli-provider && npm run build:agent-cli-provider && npm run test:agent-cli-provider",

60 "dev:link": "npm link",

61 "lint": "eslint .",

62 "lint:fix": "eslint . --fix",

63 "validate:templates": "node scripts/validate-templates.js",

64 "format": "prettier --write .",

65 "format:check": "prettier --check .",

66 "deadcode": "ts-prune --skip node_modules",

67 "deadcode:files": "unimported",

68 "deadcode:deps": "depcheck",

69 "deadcode:all": "npm run deadcode && npm run deadcode:files && npm run deadcode:deps",

70 "dupcheck": "jscpd src/ --min-lines 5 --min-tokens 50 --threshold 5",

src/logic-engine.jsView file

Lines 1-28javascript

1/**

2 * LogicEngine - JavaScript sandbox for agent decision logic

3 *

4 * Provides:

5 * - Isolated VM for executing agent trigger logic

6 * - Timeout enforcement (1 second)

7 * - Ledger API access for queries

8 * - Helper functions for common patterns

9 * - Sandbox security (no fs, network, child_process)

10 */

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

src/logic-engine.jsView on unpkg · L8

cli/index.jsView file

Lines 101-141javascript

101 * Safe print - routes through statusFooter when active to prevent garbling

102 * @param {...any} args - Arguments to print (like console.log)

103 */

104function safePrint(...args) {

105 const text = args.map

cluster-hooks/block-dangerous-git.pyView file

•path = cluster-hooks/block-dangerous-git.py kind = build_helper sizeBytes = 4915 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

cluster-hooks/block-dangerous-git.pyView on unpkg