registry / agentlas / 0.5.5

agentlas@0.5.5

Agentlas agent terminal — chat with your installed AI agents and teams from the terminal, Claude Code style. Standalone: no desktop app required.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No install-time attack behavior is present. A user-invoked Codex runtime failure can trigger a guarded repair that changes the user's Codex plugin configuration.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs Agentlas with the Codex runtime; Codex exits without text and reports an OAuth-related MCP failure.

Impact

Can alter a third-party AI-agent configuration and create a backup; source restricts repair to host-matched plugin entries.

Mechanism

Automatically disables a matched OAuth MCP plugin after inspecting Codex error output and plugin cache.

Rationale

Source inspection found no concrete credential exfiltration, remote payload execution, or install-time persistence. Automatic mutation of `~/.codex/config.toml` after a runtime failure creates a guarded AI-agent extension lifecycle risk that warrants a warning, not a block.

Evidence

package.jsonbin/agentlas.cjsengine/agentlas-native-host.cjsengine/agentlas-doctor.cjsengine/agentlas.cjsengine/agentlas-api-agent.cjs~/.codex/config.toml~/.codex/config.toml.bak-doctor-<timestamp>~/.codex/auth.json<Agentlas user data>/runtime-homes/codex/config.toml

Network endpoints4

agentlas.cloudagentlas.cloud/api/mcp/v1api.anthropic.com/v1/messagesapi.openai.com/v1/chat/completions

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`engine/agentlas-native-host.cjs` auto-runs Runtime Doctor after a failed Codex execution.
`engine/agentlas-doctor.cjs` can back up and edit `~/.codex/config.toml`, disabling a detected plugin without separate confirmation.
`engine/agentlas-native-host.cjs` creates isolated `CODEX_HOME` and may link or copy existing `~/.codex/auth.json` into it.

Evidence against

`package.json` has no `preinstall`, `install`, or `postinstall` lifecycle hook.
`bin/agentlas.cjs` bootstraps local Agentlas SQLite data only when the user invokes the CLI.
Network calls target configured AI providers and Agentlas Cloud routes in user-invoked API, login, search, upload, or update features.
No `eval`, VM execution, remote code loader, or install-time network activity was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 21 file(s), 741 KB of source, external domains: 127.0.0.1, agentlas.cloud, api.anthropic.com, api.deepseek.com, api.moonshot.ai, api.openai.com, api.upstage.ai, api.z.ai, generativelanguage.googleapis.com, github.com, registry.npmjs.org

Source & flagged code

7 flagged

bin/agentlas.cjsView file

Lines 1-43javascript

1#!/usr/bin/env node

2/*

3 * agentlas — Agentlas를 터미널에서 쓰는 독립 CLI (Claude Code 방식).

4 *

5 * `npm install -g agentlas` 후 `agentlas` 하나로 완결된다. 데스크탑 앱은 필요 없다:

6 * 엔진(engine/agentlas.cjs — REPL·라우팅·클라우드·자격증명 포함 전체 터미널

7 * 클라이언트)이 이 패키지에 들어 있고(정본), 첫 실행 시 앱과 동일한 SQLite 스키마를

8 * 직접 부트스트랩한 뒤 빌트인 에이전트를 시드한다. 데스크탑 앱이 설치돼 있으면

9 * 같은 userData(SQLite)를 자동으로 공유한다 — 별도 설정 없이 데이터가 한 몸이다.

10 *

11 * SQLite: better-sqlite3(optionalDependency, npm이 빌드해주면 네이티브) →

12 * 실패 시 Node 22+의 node:sqlite 폴백.

13 *

14 * env 오버라이드:

15 * AGENTLAS_USER_DATA_DIR 데이터 폴더 (기본: 앱과 동일한 userData)

16 *

17 * 런처 자체 명령: `agentlas --where` → 해석 결과 JSON 출력 후 종료.

18 */

19"use strict";

21const fs = require("node:fs");

22const os = require("node:os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/agentlas.cjsView on unpkg · L20

23const path = require("node:path");

24const { spawn } = require("node:child_process");

High

Child Process

Package source references child process execution.

bin/agentlas.cjsView on unpkg · L23

26const REAL_SELF = (() => {

27 try { return fs.realpathSync(__filename); } catch { return __filename; }

28})();

29const PKG_ROOT = path.dirname(path.dirname(REAL_SELF));

30const ENGINE = path.join(PKG_ROOT, "engine", "agentlas.cjs");

32function exists(p) {

33 try { fs.accessSync(p); return true; } catch { return false; }

34}

36// ── userData / DB 경로 (engine/agentlas.cjs의 userDataDir와 동일 규칙) ──

37function userDataDir() {

38 const override = process.env.AGENTLAS_USER_DATA_DIR;

39 if (override) return override;

40 const home = os.homedir();

41 if (process.platform === "darwin") return path.join(home, "Library", "Application Support", "Agentlas");

42 if (process.platform === "win32") return path.join(process.env.APPDATA || path.join(home, "AppData", "Roaming"), "Agentlas");

43 return path.join(process.env.XDG_CONFIG_HOME || path.join(home, ".config"), "Agentlas");

engine/agentlas-parity.cjsView file

Lines 1-38javascript

1"use strict";

2/*

3 * agentlas-parity: 데스크탑 앱 전용이던 기능의 터미널 패리티 구현.

4 *

5 * storm — Hephaestus Stormbreaker(route --auto-run) 파이프라인 실행 (+연구 증거)

6 * swarm — emergent 에이전트 스웜 (블랙보드 + `## Spawn` 그래프 성장 + 종합)

7 * automation — 앱 스케줄러가 실행하는 자동화의 등록/목록/토글 (같은 SQLite)

8 * usage — 로컬 실행/자동화/세션 집계

9 * telegram — 텔레그램 바인딩 현황 (읽기 전용; 페어링은 앱 Connect)

10 * cloud search — 마켓플레이스 검색 (MCP marketplace.search_agents)

11 *

12 * agentlas.cjs 가 create(deps)로 주입한 헬퍼(captureRuntime/runApi/resolveRuntime 등)만

13 * 사용한다 — 이 파일은 DB 스키마와 프로세스 스폰 외에 자체 상태를 갖지 않는다.

14 */

15const os = require("node:os");

16const path = require("node:path");

17const fs = require("node:fs");

18const crypto = require("node:crypto");

19const { spawn } = require("node:child_process");

20const { Ui } = require("./agentlas-ui.cjs");

22// ── 스웜 상수 (앱 mcp/swarm-run.ts 와 동일한 안전 상한) ──

23const SWARM_MAX_TASKS = 24;

24const SWARM_SPAWN_PER_TURN = 12;

26// Agentlas-OS/Hephaestus 내부 시스템 에이전트(마켓 제품 아님) — 검색/목록에서 숨긴다.

27// 데스크탑 electron/agents/hired-agents.ts isInternalAgentSlug 와 규칙 동일.

28function isInternalAgentSlug(slug) {

29 const s = String(slug || "").toLowerCase();

30 return /^researcher-\d+/.test(s) || s === "research-intelligence-desk" || s.startsWith("hephaestus-");

31}

33const LOGIN_CALLBACK_PATH = "/callback";

34const LOGIN_TIMEOUT_MS = 180_000;

35const MAX_LOGIN_SESSION_BYTES = 16 * 1024;

37function createLoginState(randomBytes = crypto.randomBytes) {

38 const bytes = Buffer.from(randomBytes(32));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

engine/agentlas-parity.cjsView on unpkg · L18

Lines 305-345javascript

305 else if (args[i] === "--background") ctx.background = true;

306 else rest.push(args[i]);

307 }

308 const r = await stormRun(db, rest.join(" "), ctx);

309 if (!r.ok) process.exitCode = 1;

310 }

311

312 // ── Hephaestus 네이티브 패스스루 — 엔진 전 기능을 터미널 1급으로 노출 ──

313 // stdio inherit 로 돌려 색/프롬프트/스트리밍이 네이티브 그대로 나온다.

314 function runHephaestusInteractive(args, opts = {}) {

315 const isCareerGraph = args[0] === "career-graph" || args[0] === "career_graph";

316 const found = isCareerGraph ? careerGraphRuntime() : hephaestusBin();

317 if (!found) {

318 process.stderr.write(

319 isCareerGraph

320 ? "Career Graph 런타임이 없습니다 — 최신 Agentlas OS / Hephaestus 설치 후 다시 시도하세요.\n"

321 : "Hephaestus 런타임이 없습니다 — 데스크탑 앱 설치 또는 Hephaestus 인스톨러 실행 후 다시 시도하세요.\n",

322 );

323 process.stderr.write(

324 isCareerGraph

325 ? "설치 또는 지정: HEPHAESTUS_CAREER_GRAPH_BIN=<경로> 또는 HEPHAESTUS_RUNTIME_ROOT=<경로>\n"

326 : "설치: https://agentlas.cloud · 또는 HEPHAESTUS_BIN=<경로> 지정\n",

327 );

328 return Promise.resolve(1);

329 }

330 const cwd = opts.cwd || D.runCwd();

331 const moduleName = found.kind === "python" && isCareerGraph ? "career_graph" : "agentlas_cloud";

332 const moduleArgs = moduleName === "career_graph" ? args.slice(1) : args;

333 const child =

334 found.kind === "bin"

335 ? spawn(found.exec, isCareerGraph ? args.slice(1) : args, { cwd, stdio: "inherit" })

336 : spawn("python3", ["-c", PY_BOOTSTRAP, moduleName, ...moduleArgs], {

337 cwd,

338 stdio: "inherit",

339 env: { ...process.env, HEPHAESTUS_RUNTIME_ROOT: found.root },

340 });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

engine/agentlas-parity.cjsView on unpkg · L325

341 return new Promise((resolve) => {

342 child.on("error", (e) => {

343 process.stderr.write(`Hephaestus 실행 실패: ${e.message}\n`);

344 resolve(1);

345 });

engine/agentlas.cjsView file

Lines 7765-7805javascript

7765 return (j.content && j.content[0] && j.content[0].text) || "";

7766 }

7767 if (backend === "openai" || backend === "upstage" || backend === "custom") {

7768 const base = backend === "upstage"

7769 ? "https://api.upstage.ai/v1"

7770 : backend === "custom"

7771 ? normalizeCustomApiBaseUrl(Object.prototype.hasOwnProperty.call(options, "customBaseUrl")

7772 ? options.customBaseUrl

7773 : readCustomApiBaseUrl())

7774 : "https://api.openai.com/v1";

7775 const label = backend === "custom" ? "Custom API" : backend === "upstage" ? "Upstage" : "OpenAI";

7776 const resp = await fetchImpl(`${base}/chat/completions`, {

7777 method: "POST",

7778 headers: { "content-type": "application/json", authorization: "Bearer " + key },

7779 body: JSON.stringify({ model, messages: [{ role: "system", content: system }, { role: "user", content: prompt }] }),

7780 });

7781 if (!resp.ok) throw new Error(`${label} ${resp.status}: ${(await resp.text().catch(() => "")).slice(0, 200)}`);

7782 const j = await resp.json();

7783 return (j.choices && j.choices[0] && j.choices[0].message && j.choices[0].message.content) || "";

7784 }

7785 if (backend === "google") {

7786 const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${encodeURIComponent(key)}`;

7787 const resp = await fetchImpl(url, {

7788 method: "POST",

7789 headers: { "content-type": "application/json" },

7790 body: JSON.stringify({ systemInstruction: { parts: [{ text: system }] }, contents: [{ role: "user", parts: [{ text: prompt }] }] }),

7791 });

7792 if (!resp.ok) throw new Error(`Google ${resp.status}: ${(await resp.text().catch(() => "")).slice(0, 200)}`);

7793 const j = await resp.json();

7794 const c = j.candidates && j.candidates[0];

7795 return (c && c.content && c.content.parts && c.content.parts[0] && c.content.parts[0].text) || "";

7796 }

7797 throw new Error("지원하지 않는 backend: " + backend);

7798}

7799

7800// 1회 실행 — CLI면 spawn(스트리밍 stdout), API면 호출 후 텍스트 출력. 종료코드 반환.

7801// ctx = { projectPath, agentId } — 메모리 주입/큐레이션에 사용.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

engine/agentlas.cjsView on unpkg · L7785

7802async function executeOnce(db, system, prompt, override, ctx) {

7803 ctx = ctx || { projectPath: null, agentId: null };

7804 if (!ctx.cwdAtRequest) ctx.cwdAtRequest = projectCwd();

7805 const rt = resolveRuntime(db, override);

test/smoke.shView file

•path = test/smoke.sh kind = payload_in_excluded_dir sizeBytes = 3496 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/smoke.shView on unpkg

•path = test/smoke.sh kind = build_helper sizeBytes = 3496 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

test/smoke.shView on unpkg

Source & flagged code

7 flagged · loading source

bin/agentlas.cjsView file

23const path = require("node:path"); L24: const { spawn } = require("node:child_process"); L25:

High

Child Process

Package source references child process execution.

bin/agentlas.cjsView on unpkg · L23

20L21: const fs = require("node:fs"); L22: const os = require("node:os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/agentlas.cjsView on unpkg · L20

engine/agentlas-parity.cjsView file

325? "설치 또는 지정: HEPHAESTUS_CAREER_GRAPH_BIN=<경로> 또는 HEPHAESTUS_RUNTIME_ROOT=<경로>\n" L326: : "설치: https://agentlas.cloud · 또는 HEPHAESTUS_BIN=<경로> 지정\n", L327: ); ... L334: found.kind === "bin" L335: ? spawn(found.exec, isCareerGraph ? args.slice(1) : args, { cwd, stdio: "inherit" }) L336: : spawn("python3", ["-c", PY_BOOTSTRAP, moduleName, ...moduleArgs], { ... L338: stdio: "inherit", L339: env: { ...process.env, HEPHAESTUS_RUNTIME_ROOT: found.root }, L340: });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

engine/agentlas-parity.cjsView on unpkg · L325

18const crypto = require("node:crypto"); L19: const { spawn } = require("node:child_process"); L20: const { Ui } = require("./agentlas-ui.cjs"); ... L37: function createLoginState(randomBytes = crypto.randomBytes) { L38: const bytes = Buffer.from(randomBytes(32)); L39: if (bytes.length !== 32) throw new Error("로그인 state 생성에 실패했습니다."); ... L59: try { L60: url = new URL(String(rawUrl || "/"), "http://127.0.0.1"); L61: } catch { ... L129: const candidates = [ L130: process.env.HEPHAESTUS_BIN, L131: path.join(os.homedir(), ".agentlas", "runtime", "current", "bin", "hephaestus"),

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

engine/agentlas-parity.cjsView on unpkg · L18

engine/agentlas.cjsView file

7785if (backend === "google") { L7786: const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${encodeURIComponent(key)}`; L7787: const resp = await fetchImpl(url, { ... L7789: headers: { "content-type": "application/json" }, L7790: body: JSON.stringify({ systemInstruction: { parts: [{ text: system }] }, contents: [{ role: "user", parts: [{ text: prompt }] }] }), L7791: }); ... L7799: L7800: // 1회 실행 — CLI면 spawn(스트리밍 stdout), API면 호출 후 텍스트 출력. 종료코드 반환. L7801: // ctx = { projectPath, agentId } — 메모리 주입/큐레이션에 사용.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

engine/agentlas.cjsView on unpkg · L7785

test/smoke.shView file

•path = test/smoke.sh kind = payload_in_excluded_dir sizeBytes = 3496 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/smoke.shView on unpkg

•path = test/smoke.sh kind = build_helper sizeBytes = 3496 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

test/smoke.shView on unpkg

Findings

6 High5 Medium4 Low

HighChild Processbin/agentlas.cjs

HighShell

HighSame File Env Network Executionengine/agentlas-parity.cjs

HighCommand Output Exfiltrationengine/agentlas.cjs

HighSandbox Evasion Gated Capabilityengine/agentlas-parity.cjs

HighPayload In Excluded Dirtest/smoke.sh

MediumDynamic Requirebin/agentlas.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpertest/smoke.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

bin/agentlas.cjsView file

Lines 1-43javascript

1#!/usr/bin/env node

2/*

3 * agentlas — Agentlas를 터미널에서 쓰는 독립 CLI (Claude Code 방식).

4 *

5 * `npm install -g agentlas` 후 `agentlas` 하나로 완결된다. 데스크탑 앱은 필요 없다:

6 * 엔진(engine/agentlas.cjs — REPL·라우팅·클라우드·자격증명 포함 전체 터미널

7 * 클라이언트)이 이 패키지에 들어 있고(정본), 첫 실행 시 앱과 동일한 SQLite 스키마를

8 * 직접 부트스트랩한 뒤 빌트인 에이전트를 시드한다. 데스크탑 앱이 설치돼 있으면

9 * 같은 userData(SQLite)를 자동으로 공유한다 — 별도 설정 없이 데이터가 한 몸이다.

10 *

11 * SQLite: better-sqlite3(optionalDependency, npm이 빌드해주면 네이티브) →

12 * 실패 시 Node 22+의 node:sqlite 폴백.

13 *

14 * env 오버라이드:

15 * AGENTLAS_USER_DATA_DIR 데이터 폴더 (기본: 앱과 동일한 userData)

16 *

17 * 런처 자체 명령: `agentlas --where` → 해석 결과 JSON 출력 후 종료.

18 */

19"use strict";

21const fs = require("node:fs");

22const os = require("node:os");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/agentlas.cjsView on unpkg · L20

23const path = require("node:path");

24const { spawn } = require("node:child_process");

High

Child Process

Package source references child process execution.

bin/agentlas.cjsView on unpkg · L23

26const REAL_SELF = (() => {

27 try { return fs.realpathSync(__filename); } catch { return __filename; }

28})();

29const PKG_ROOT = path.dirname(path.dirname(REAL_SELF));

30const ENGINE = path.join(PKG_ROOT, "engine", "agentlas.cjs");

32function exists(p) {

33 try { fs.accessSync(p); return true; } catch { return false; }

34}

36// ── userData / DB 경로 (engine/agentlas.cjs의 userDataDir와 동일 규칙) ──

37function userDataDir() {

38 const override = process.env.AGENTLAS_USER_DATA_DIR;

39 if (override) return override;

40 const home = os.homedir();

41 if (process.platform === "darwin") return path.join(home, "Library", "Application Support", "Agentlas");

42 if (process.platform === "win32") return path.join(process.env.APPDATA || path.join(home, "AppData", "Roaming"), "Agentlas");

43 return path.join(process.env.XDG_CONFIG_HOME || path.join(home, ".config"), "Agentlas");

engine/agentlas-parity.cjsView file

Lines 1-38javascript

1"use strict";

2/*

3 * agentlas-parity: 데스크탑 앱 전용이던 기능의 터미널 패리티 구현.

4 *

5 * storm — Hephaestus Stormbreaker(route --auto-run) 파이프라인 실행 (+연구 증거)

6 * swarm — emergent 에이전트 스웜 (블랙보드 + `## Spawn` 그래프 성장 + 종합)

7 * automation — 앱 스케줄러가 실행하는 자동화의 등록/목록/토글 (같은 SQLite)

8 * usage — 로컬 실행/자동화/세션 집계

9 * telegram — 텔레그램 바인딩 현황 (읽기 전용; 페어링은 앱 Connect)

10 * cloud search — 마켓플레이스 검색 (MCP marketplace.search_agents)

11 *

12 * agentlas.cjs 가 create(deps)로 주입한 헬퍼(captureRuntime/runApi/resolveRuntime 등)만

13 * 사용한다 — 이 파일은 DB 스키마와 프로세스 스폰 외에 자체 상태를 갖지 않는다.

14 */

15const os = require("node:os");

16const path = require("node:path");

17const fs = require("node:fs");

18const crypto = require("node:crypto");

19const { spawn } = require("node:child_process");

20const { Ui } = require("./agentlas-ui.cjs");

22// ── 스웜 상수 (앱 mcp/swarm-run.ts 와 동일한 안전 상한) ──

23const SWARM_MAX_TASKS = 24;

24const SWARM_SPAWN_PER_TURN = 12;

26// Agentlas-OS/Hephaestus 내부 시스템 에이전트(마켓 제품 아님) — 검색/목록에서 숨긴다.

27// 데스크탑 electron/agents/hired-agents.ts isInternalAgentSlug 와 규칙 동일.

28function isInternalAgentSlug(slug) {

29 const s = String(slug || "").toLowerCase();

30 return /^researcher-\d+/.test(s) || s === "research-intelligence-desk" || s.startsWith("hephaestus-");

31}

33const LOGIN_CALLBACK_PATH = "/callback";

34const LOGIN_TIMEOUT_MS = 180_000;

35const MAX_LOGIN_SESSION_BYTES = 16 * 1024;

37function createLoginState(randomBytes = crypto.randomBytes) {

38 const bytes = Buffer.from(randomBytes(32));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

engine/agentlas-parity.cjsView on unpkg · L18

Lines 305-345javascript

305 else if (args[i] === "--background") ctx.background = true;

306 else rest.push(args[i]);

307 }

308 const r = await stormRun(db, rest.join(" "), ctx);

309 if (!r.ok) process.exitCode = 1;

310 }

311

312 // ── Hephaestus 네이티브 패스스루 — 엔진 전 기능을 터미널 1급으로 노출 ──

313 // stdio inherit 로 돌려 색/프롬프트/스트리밍이 네이티브 그대로 나온다.

314 function runHephaestusInteractive(args, opts = {}) {

315 const isCareerGraph = args[0] === "career-graph" || args[0] === "career_graph";

316 const found = isCareerGraph ? careerGraphRuntime() : hephaestusBin();

317 if (!found) {

318 process.stderr.write(

319 isCareerGraph

320 ? "Career Graph 런타임이 없습니다 — 최신 Agentlas OS / Hephaestus 설치 후 다시 시도하세요.\n"

321 : "Hephaestus 런타임이 없습니다 — 데스크탑 앱 설치 또는 Hephaestus 인스톨러 실행 후 다시 시도하세요.\n",

322 );

323 process.stderr.write(

324 isCareerGraph

325 ? "설치 또는 지정: HEPHAESTUS_CAREER_GRAPH_BIN=<경로> 또는 HEPHAESTUS_RUNTIME_ROOT=<경로>\n"

326 : "설치: https://agentlas.cloud · 또는 HEPHAESTUS_BIN=<경로> 지정\n",

327 );

328 return Promise.resolve(1);

329 }

330 const cwd = opts.cwd || D.runCwd();

331 const moduleName = found.kind === "python" && isCareerGraph ? "career_graph" : "agentlas_cloud";

332 const moduleArgs = moduleName === "career_graph" ? args.slice(1) : args;

333 const child =

334 found.kind === "bin"

335 ? spawn(found.exec, isCareerGraph ? args.slice(1) : args, { cwd, stdio: "inherit" })

336 : spawn("python3", ["-c", PY_BOOTSTRAP, moduleName, ...moduleArgs], {

337 cwd,

338 stdio: "inherit",

339 env: { ...process.env, HEPHAESTUS_RUNTIME_ROOT: found.root },

340 });

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

engine/agentlas-parity.cjsView on unpkg · L325

341 return new Promise((resolve) => {

342 child.on("error", (e) => {

343 process.stderr.write(`Hephaestus 실행 실패: ${e.message}\n`);

344 resolve(1);

345 });

engine/agentlas.cjsView file

Lines 7765-7805javascript

7765 return (j.content && j.content[0] && j.content[0].text) || "";

7766 }

7767 if (backend === "openai" || backend === "upstage" || backend === "custom") {

7768 const base = backend === "upstage"

7769 ? "https://api.upstage.ai/v1"

7770 : backend === "custom"

7771 ? normalizeCustomApiBaseUrl(Object.prototype.hasOwnProperty.call(options, "customBaseUrl")

7772 ? options.customBaseUrl

7773 : readCustomApiBaseUrl())

7774 : "https://api.openai.com/v1";

7775 const label = backend === "custom" ? "Custom API" : backend === "upstage" ? "Upstage" : "OpenAI";

7776 const resp = await fetchImpl(`${base}/chat/completions`, {

7777 method: "POST",

7778 headers: { "content-type": "application/json", authorization: "Bearer " + key },

7779 body: JSON.stringify({ model, messages: [{ role: "system", content: system }, { role: "user", content: prompt }] }),

7780 });

7781 if (!resp.ok) throw new Error(`${label} ${resp.status}: ${(await resp.text().catch(() => "")).slice(0, 200)}`);

7782 const j = await resp.json();

7783 return (j.choices && j.choices[0] && j.choices[0].message && j.choices[0].message.content) || "";

7784 }

7785 if (backend === "google") {

7786 const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${encodeURIComponent(key)}`;

7787 const resp = await fetchImpl(url, {

7788 method: "POST",

7789 headers: { "content-type": "application/json" },

7790 body: JSON.stringify({ systemInstruction: { parts: [{ text: system }] }, contents: [{ role: "user", parts: [{ text: prompt }] }] }),

7791 });

7792 if (!resp.ok) throw new Error(`Google ${resp.status}: ${(await resp.text().catch(() => "")).slice(0, 200)}`);

7793 const j = await resp.json();

7794 const c = j.candidates && j.candidates[0];

7795 return (c && c.content && c.content.parts && c.content.parts[0] && c.content.parts[0].text) || "";

7796 }

7797 throw new Error("지원하지 않는 backend: " + backend);

7798}

7799

7800// 1회 실행 — CLI면 spawn(스트리밍 stdout), API면 호출 후 텍스트 출력. 종료코드 반환.

7801// ctx = { projectPath, agentId } — 메모리 주입/큐레이션에 사용.

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

engine/agentlas.cjsView on unpkg · L7785

7802async function executeOnce(db, system, prompt, override, ctx) {

7803 ctx = ctx || { projectPath: null, agentId: null };

7804 if (!ctx.cwdAtRequest) ctx.cwdAtRequest = projectCwd();

7805 const rt = resolveRuntime(db, override);

test/smoke.shView file

•path = test/smoke.sh kind = payload_in_excluded_dir sizeBytes = 3496 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

test/smoke.shView on unpkg

•path = test/smoke.sh kind = build_helper sizeBytes = 3496 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

test/smoke.shView on unpkg