registry / agentlenspro / 2.0.0

agentlenspro@2.0.0

⚠ Under review

AgentlensPro — professional observability for AI agent sessions: OTEL traces and local log file ingestion, CLI + server + skills. Standalone (npx) and Docker.

Static Scan Results

scanned 1h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 1.87 MB of source, external domains: 127.0.0.1, github.com, json-schema.org, raw.githubusercontent.com, spec.openapis.org, stackoverflow.com, tools.ietf.org, www.safaribooksonline.com, www.w3.org

Source & flagged code

8 flagged

standalone/server.jsView file

154"goldeneye": { inputPerMTok: 1.25, cacheReadPerMTok: 0.125, cacheWritePerMTok: 0, outputPerMTok: 10, contextWindowTokens: 0, multiplier: 0, multiplierAnnualPostJun1: 0 }, L155: // ── OpenCode Zen https://opencode.ai/docs/zen/ ──────────────────────────── L156: // big-pickle: OpenCode's stealth model, free during limited evaluation period. ... L1355: // validation function arguments L1356: data: new codegen_1.Name("data"), L1357: // data passed to validation function ... L2382: id = normalizeId(id); L2383: return resolver.resolve(baseId, id); L2384: } ... L3245: for (i = 0; i < input.length; i++) { L3246: code = input[i].charCodeAt(0); L3247: if (code === 48) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

standalone/server.jsView on unpkg · L154

154Trigger-reachable chain: manifest.bin -> standalone/cli.js -> standalone/server.js L154: "goldeneye": { inputPerMTok: 1.25, cacheReadPerMTok: 0.125, cacheWritePerMTok: 0, outputPerMTok: 10, contextWindowTokens: 0, multiplier: 0, multiplierAnnualPostJun1: 0 }, L155: // ── OpenCode Zen https://opencode.ai/docs/zen/ ──────────────────────────── L156: // big-pickle: OpenCode's stealth model, free during limited evaluation period. ... L1355: // validation function arguments L1356: data: new codegen_1.Name("data"), L1357: // data passed to validation function ... L2382: id = normalizeId(id); L2383: return resolver.resolve(baseId, id); L2384: } ... L3245: for (i = 0; i < input.length; i++) { L3246: code = input[i].charCodeAt(0); L3247: if (code === 48) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

Source & flagged code

8 flagged · loading source

standalone/server.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

standalone/server.jsView on unpkg · L154

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

standalone/server.jsView on unpkg · L154

9250var os12 = __toESM(require("os")); L9251: var import_child_process4 = require("child_process"); L9252:

High

Child Process

Package source references child process execution.

standalone/server.jsView on unpkg · L9250

36119otlpServer.listen(OTLP_PORT, BIND_HOST, () => { L36120: console.log(`[AgentLens] OTLP receiver \u2192 http://localhost:${OTLP_PORT}`); L36121: }); ... L36132: console.log(`[AgentLens] MCP server \u2192 http://localhost:${MCP_PORT}/mcp`); L36133: if (process.env.AGENTLENS_OPEN_BROWSER === "1" || process.argv.includes("--open")) { L36134: const cmd = process.platform === "darwin" ? `open "${url}"` : process.platform === "win32" ? `start "" "${url}"` : `xdg-open "${url}"`; L36135: (0, import_child_process4.exec)(cmd, (err) => { L36136: if (err) console.log(`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

standalone/server.jsView on unpkg · L36119

3071sourceCode = this.opts.code.process(sourceCode, sch); L3072: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L3073: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

standalone/server.jsView on unpkg · L3071

standalone/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = agentlenspro@1.0.1 matchedIdentity = npm:YWdlbnRsZW5zcHJv:1.0.1 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

standalone/cli.jsView on unpkg

45Cross-file remote execution chain: standalone/cli.js spawns standalone/server.js; helper contains network access plus dynamic code execution. L45: // src/safeConfigEdit.ts L46: var import_child_process = require("child_process"); L47: var path = __toESM(require("path")); L48: var SafeEditError = class extends Error { L49: constructor(message, exitCode) { L50: super(message); ... L58: if (cachedPythonBin) return cachedPythonBin; L59: const candidates = process.platform === "win32" ? ["python", "py", "python3"] : ["python3", "python"]; L60: for (const bin of candidates) { ... L72: const candidates = [ L73: path.join(__dirname, "..", "scripts", "safe_config_edit.py"), L74: path.join(__dirname, "..", "..", "scripts", "safe_config_edit.py")

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

standalone/cli.jsView on unpkg · L45

scripts/safe_config_edit.pyView file

•path = scripts/safe_config_edit.py kind = build_helper sizeBytes = 21359 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/safe_config_edit.pyView on unpkg

Findings

3 Critical4 High4 Medium6 Low

CriticalCredential Exfiltrationstandalone/server.js

CriticalTrigger Reachable Dangerous Capabilitystandalone/server.js

CriticalPrevious Version Dangerous Deltastandalone/cli.js

HighChild Processstandalone/server.js

HighShell

HighSame File Env Network Executionstandalone/server.js

HighCross File Remote Execution Contextstandalone/cli.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/safe_config_edit.py

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalstandalone/server.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

standalone/server.jsView file

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

standalone/server.jsView on unpkg · L154

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

standalone/cli.jsView file

Lines 25-65javascript

25 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

26 mod

27));

29// src/shared/pricing.ts

30var init_pricing = __esm({

31 "src/shared/pricing.ts"() {

32 "use strict";

33 }

34});

36// src/cli/main.ts

37var fs6 = __toESM(require("fs"));

38var path9 = __toESM(require("path"));

40// src/telemetryConfig.ts

41var path2 = __toESM(require("path"));

42var os = __toESM(require("os"));

43var fs = __toESM(require("fs/promises"));

45// src/safeConfigEdit.ts

46var import_child_process = require("child_process");

47var path = __toESM(require("path"));

48var SafeEditError = class extends Error {

49 constructor(message, exitCode) {

50 super(message);

51 this.exitCode = exitCode;

52 this.name = "SafeEditError";

53 }

54 exitCode;

55};

56var cachedPythonBin = null;

57function pythonBin() {

58 if (cachedPythonBin) return cachedPythonBin;

59 const candidates = process.platform === "win32" ? ["python", "py", "python3"] : ["python3", "python"];

60 for (const bin of candidates) {

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

standalone/cli.jsView on unpkg · L45

61 try {

62 (0, import_child_process.execFileSync)(bin, ["--version"], { timeout: 5e3, stdio: "ignore" });

63 cachedPythonBin = bin;

64 return bin;

65 } catch {

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

standalone/cli.jsView on unpkg