registry / @xnetjs/plugins / 0.11.0

@xnetjs/plugins@0.11.0

Plugin system for xNet -- registry, sandboxed script execution, AI-powered script generation, and service integrations.

Static Scan Results

scanned 10h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 684 KB of source, external domains: 127.0.0.1, api.airtable.com, api.anthropic.com, api.example.com, api.github.com, api.linear.app, api.notion.com, api.openai.com, api.resend.com, api.telegram.org, crm.example.test, open.spotify.com, openrouter.ai, slack.com, vimeo.com, www.googleapis.com, www.youtube.com, youtu.be

Source & flagged code

3 flagged

dist/index.jsView file

Lines 9264-9304javascript

9264 },

9265 // No async/await (scripts must be synchronous for predictability)

9266 AwaitExpression: (node) => {

9267 errors.push(`Async/await is not allowed at position ${node.start}`);

9268 },

9269 // Check for async functions

9270 FunctionDeclaration: (node) => {

9271 if (node.async) {

9272 errors.push(`Async functions are not allowed at position ${node.start}`);

9273 }

9274 },

9275 FunctionExpression: (node) => {

9276 if (node.async) {

9277 errors.push(`Async functions are not allowed at position ${node.start}`);

9278 }

9279 },

9280 ArrowFunctionExpression: (node) => {

9281 if (node.async) {

9282 errors.push(`Async arrow functions are not allowed at position ${node.start}`);

9283 }

9284 },

9285 // No new Function()

9286 NewExpression: (node) => {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L9284

9287 if (node.callee?.type === "Identifier" && node.callee.name === "Function") {

9288 errors.push(`new Function() is not allowed at position ${node.start}`);

9289 }

9290 },

9291 // Check for forbidden property access

9292 MemberExpression: (node) => {

9293 if (node.computed && node.property?.type === "Literal") {

9294 const propName = String(node.property.value);

9295 if (FORBIDDEN_PROPERTIES.has(propName)) {

9296 errors.push(`Access to '${propName}' is forbidden at position ${node.property.start}`);

9297 }

9298 }

9299 if (!node.computed && node.property?.type === "Identifier") {

9300 if (FORBIDDEN_PROPERTIES.has(node.property.name)) {

9301 errors.push(

9302 `Access to '${node.property.name}' is forbidden at position ${node.property.start}`

9303 );

9304 }

Lines 9325-9365javascript

9325 };

9326}

9327function quickSafetyCheck(code) {

9328 const lowerCode = code.toLowerCase();

9329 const dangerousPatterns = [

9330 "import ",

9331 "require(",

9332

dist/services/node.jsView file

Lines 1-22javascript

1// src/services/local-api.ts

2import { timingSafeEqual } from "crypto";

3import { createServer } from "http";

4import { URL as URL2 } from "url";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/services/node.jsView on unpkg · L2

Source & flagged code

3 flagged · loading source

dist/index.jsView file

9345"process.", L9346: "child_process" L9347: ];

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L9345

9284}, L9285: // No new Function() L9286: NewExpression: (node) => {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L9284

dist/services/node.jsView file

2Cross-file remote execution chain: dist/services/node.js spawns dist/index.js; helper contains network access plus dynamic code execution. L2: import { timingSafeEqual } from "crypto"; L3: import { createServer } from "http"; L4: import { URL as URL2 } from "url"; ... L134: try { L135: const parsed = JSON.parse(serialized); L136: const validation = validateAiMutationPlan(parsed); ... L718: canvasId: params.canvasId, L719: includeXNetMetadata: searchParams.get("includeXNetMetadata") !== "false" L720: }) ... L1440: * The narrow surface handed to built-in tool handlers and resource routes L1441: * (`tools/`, `resources/`): closures over the private methods, so the class L1442: * stays the facade and its public type is unchanged. The closures are lazy —

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/services/node.jsView on unpkg · L2

Findings

2 High2 Medium5 Low

HighChild Processdist/index.js

HighCross File Remote Execution Contextdist/services/node.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowEvaldist/index.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/index.jsView file

Lines 9264-9304javascript

9264 },

9265 // No async/await (scripts must be synchronous for predictability)

9266 AwaitExpression: (node) => {

9267 errors.push(`Async/await is not allowed at position ${node.start}`);

9268 },

9269 // Check for async functions

9270 FunctionDeclaration: (node) => {

9271 if (node.async) {

9272 errors.push(`Async functions are not allowed at position ${node.start}`);

9273 }

9274 },

9275 FunctionExpression: (node) => {

9276 if (node.async) {

9277 errors.push(`Async functions are not allowed at position ${node.start}`);

9278 }

9279 },

9280 ArrowFunctionExpression: (node) => {

9281 if (node.async) {

9282 errors.push(`Async arrow functions are not allowed at position ${node.start}`);

9283 }

9284 },

9285 // No new Function()

9286 NewExpression: (node) => {

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/index.jsView on unpkg · L9284

9287 if (node.callee?.type === "Identifier" && node.callee.name === "Function") {

9288 errors.push(`new Function() is not allowed at position ${node.start}`);

9289 }

9290 },

9291 // Check for forbidden property access

9292 MemberExpression: (node) => {

9293 if (node.computed && node.property?.type === "Literal") {

9294 const propName = String(node.property.value);

9295 if (FORBIDDEN_PROPERTIES.has(propName)) {

9296 errors.push(`Access to '${propName}' is forbidden at position ${node.property.start}`);

9297 }

9298 }

9299 if (!node.computed && node.property?.type === "Identifier") {

9300 if (FORBIDDEN_PROPERTIES.has(node.property.name)) {

9301 errors.push(

9302 `Access to '${node.property.name}' is forbidden at position ${node.property.start}`

9303 );

9304 }

Lines 9325-9365javascript

9325 };

9326}

9327function quickSafetyCheck(code) {

9328 const lowerCode = code.toLowerCase();

9329 const dangerousPatterns = [

9330 "import ",

9331 "require(",

9332

dist/services/node.jsView file

Lines 1-22javascript

1// src/services/local-api.ts

2import { timingSafeEqual } from "crypto";

3import { createServer } from "http";

4import { URL as URL2 } from "url";

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/services/node.jsView on unpkg · L2