registry / agentgui / 1.0.1001

agentgui@1.0.1001

Multi-agent ACP client with real-time communication

Static Scan Results

scanned 4mo ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

GitDependencyNoLicenseWildcardDependency

scanned 53 file(s), 848 KB of source, external domains: 127.0.0.1, 247420.xyz, anentrypoint.github.io, cdn.jsdelivr.net, fonts.gstatic.com, github.com, unpkg.com, www.w3.org

Source & flagged code

8 flagged

package.jsonView file

•scripts.postinstall = node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/gmgui.cjsView file

1#!/usr/bin/env node L2: const { spawn, spawnSync } = require('child_process'); L3: const path = require('path');

High

Child Process

Package source references child process execution.

bin/gmgui.cjsView on unpkg · L1

lib/terminal.jsView file

23function defaultShell() { L24: if (os.platform() === 'win32') return process.env.COMSPEC || 'cmd.exe'; L25: return process.env.SHELL || '/bin/bash';

High

Shell

Package source references shell execution.

lib/terminal.jsView on unpkg · L23

database.jsView file

38L39: const require = createRequire(import.meta.url); L40:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

database.jsView on unpkg · L38

test-integration.jsView file

22import crypto from 'crypto'; L23: import http from 'http'; L24: import { WebSocket } from 'ws'; ... L242: // Paths starting with ~ should expand to homedir before confinement. L243: const home = os.homedir(); L244: const file = path.join(home, '.bashrc'); L245: if (fs.existsSync(file)) { ... L276: try { L277: const _decoded = Buffer.from(_auth.slice(6), 'base64').toString('utf8'); L278: const _ci = _decoded.indexOf(':'); ... L286: } L287: if (!_ok) { res.writeHead(401); res.end('Unauthorized'); return; }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

test-integration.jsView on unpkg · L22

scripts/capture-screenshots.mjsView file

8import path from 'path'; L9: import net from 'net'; L10: import { spawn } from 'child_process'; L11: import { fileURLToPath } from 'url'; ... L23: function pickChrome() { L24: if (process.env.CHROME && fs.existsSync(process.env.CHROME)) return process.env.CHROME; L25: const home = process.env.USERPROFILE || process.env.HOME || '';

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/capture-screenshots.mjsView on unpkg · L8

electron/main.jsView file

10const BASE_URL = (process.env.BASE_URL || '/gm').replace(/\/+$/, ''); L11: const APP_URL = `http://localhost:${PORT}${BASE_URL}/`; L12: ... L19: // Electron/Chromium app runtime just to host the background HTTP server. L20: serverProcess = spawn(process.execPath, ['server.js'], { L21: cwd: ROOT, ... L24: }); L25: serverProcess.stdout.on('data', d => process.stdout.write(`[server] ${d}`)); L26: serverProcess.stderr.on('data', d => process.stderr.write(`[server] ${d}`));

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

electron/main.jsView on unpkg · L10

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/patch-fsbrowse.js && (cd node_modules/better-sqlite3 && node-gyp rebuild 2>/dev/null) || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/gmgui.cjsView file

1#!/usr/bin/env node L2: const { spawn, spawnSync } = require('child_process'); L3: const path = require('path');

High

Child Process

Package source references child process execution.

bin/gmgui.cjsView on unpkg · L1

Findings

5 High8 Medium6 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/gmgui.cjs

HighShelllib/terminal.js

HighSame File Env Network Executionscripts/capture-screenshots.mjs

HighCommand Output Exfiltrationelectron/main.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredatabase.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencetest-integration.js

MediumStructural Risk Force Deep Review

MediumGit Dependency

MediumWildcard Dependency

LowScripts Present

Affected versions and remediation

This report applies to agentgui@1.0.1001.

See all versions of agentgui for other recorded verdicts.

Review the evidence and your use of agentgui@1.0.1001 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-02 12:13:24.948Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.