registry / @vibes.diy/api-svc / 14.3.235
@vibes.diy/api-svc@14.3.235
WebSocket-based API for vibes.diy chat persistence and app deployment. Supports both HTTP POST and WebSocket connections using the same handler via the Evento event-driven framework.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged avatar script is a manual backfill with writes gated by --apply, and the GitHub alarm operations require --write. The embedding code uses a configured backend and is called by a backfill utility; no malicious behavior was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Utility scripts run when invoked; embedding runs when its backfill caller processes an app.
Impact
No unauthorized credential disclosure or account action was identified.
Mechanism
Backfills use configured database, storage, and embedding services. GitHub issue operations in the alarm scripts are gated by --write.
AI rationale
The flagged avatar script is a manual backfill with writes gated by --apply, and the GitHub alarm operations require --write. The embedding code uses a configured backend and is called by a backfill utility; no malicious behavior was identified.
Evidence
usage-report/backfill-avatars.jsusage-report/boot-missing-export-alarm.jsusage-report/first-build-no-app-alarm.jsintern/first-message-embedding.jsusage-report/backfill-first-message-embeddings.js
Network endpoints3
vibes.diyus.posthog.comapi.github.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The avatar backfill requires an explicit --apply flag for its write pass; without it, the script reports a dry run.
- The alarm scripts require --write before using a GitHub token for issue operations.
- Embedding sends text and a backend API key to the configured embedding backend; the caller found is an explicit backfill utility.
Evidence against
- The manifest exposes a library entry point and named utility scripts; no install lifecycle script is declared.
- The avatar backfill reads from the configured database and package asset host, and its changes are gated behind --apply.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedusage-report/backfill-avatars.jsView file
1import { spawnSync } from "node:child_process";
L2: import * as fs from "node:fs";
...
L24: NEON_DATABASE_ADMIN_URL write connection (required for --apply)
L25: ASSET_FETCH_BASE public host serving /assets/cid/ (default https://vibes.diy)
L26: --apply additionally shells out to \`wrangler r2 object put\` — wrangler must be
...
L37: throw new Error(`fetch ${row.getURL} returned ${res.status}`);
L38: const buf = Buffer.from(await res.arrayBuffer());
L39: if (buf.byteLength !== row.size) {
...
L92: return Result.Err(`wrangler r2 object get exited ${res.status}`);
L93: if (res.stdout.equals(work.newBytes) === false)
L94: return Result.Err("stored avatar differs from transformed bytes");
...
L140: const apply = args.includes("--apply");
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
usage-report/backfill-avatars.jsView on unpkg · L1178if (!apply) {
console.log("\nDry run — nothing written. Re-run with --apply for the write pass.");
return;
}
const stamp = new Date().toIS
Low
Ai Review Evidence
The avatar backfill requires an explicit --apply flag for its write pass; without it, the script reports a dry run.
usage-report/backfill-avatars.jsView on unpkg · L178Findings
1 Critical1 High4 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationusage-report/backfill-avatars.js
HighSemantic Analysis Limitedintern/design-repair.js#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperusage-report/r2-affected-apps.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidenceusage-report/backfill-avatars.js
LowAi Review Evidenceusage-report/first-build-no-app-alarm.js
Affected versions and remediation
This report applies to @vibes.diy/api-svc@14.3.235.
See all versions of @vibes.diy/api-svc for other recorded verdicts.
- Review the evidence and your use of @vibes.diy/api-svc@14.3.235 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.