registry / arcie / 0.1.3

arcie@0.1.3

The electronic line — build agents at the speed of light.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

DynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 21 file(s), 38.3 KB of source, external domains: cencori.com

Source & flagged code

1 flagged

dist/loader.jsView file

Lines 1-23javascript

1import { readFileSync, existsSync, readdirSync, statSync } from "node:fs";

2import { resolve, basename, extname } from "node:path";

3import { createRequire } from "node:module";

4const _require = createRequire(import.meta.url);

5export async function loadAgent(agentDir) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/loader.jsView on unpkg · L3

6 const absDir = resolve(process.cwd(), agentDir);

7 if (!existsSync(absDir)) {

8 throw new Error(`Agent directory not found: ${absDir}`);

9 }

10 const agentFile = resolve(absDir, "agent.ts");

11 let config = { model: "gpt-4o" };

12 if (existsSync(agentFile)) {

13 try {

14 const mod = await import(agentFile);

15 if (mod.default) {

16 config = { ...config, ...mod.default };

17 }

18 }

19 catch {

20 // fall back to defaults

21 }

22 }

23 const instructions = loadInstructionsFile(absDir);

Source & flagged code

1 flagged · loading source

dist/loader.jsView file

3import { createRequire } from "node:module"; L4: const _require = createRequire(import.meta.url); L5: export async function loadAgent(agentDir) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/loader.jsView on unpkg · L3

Findings

3 Medium5 Low

MediumDynamic Requiredist/loader.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

dist/loader.jsView file

Lines 1-23javascript

1import { readFileSync, existsSync, readdirSync, statSync } from "node:fs";

2import { resolve, basename, extname } from "node:path";

3import { createRequire } from "node:module";

4const _require = createRequire(import.meta.url);

5export async function loadAgent(agentDir) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/loader.jsView on unpkg · L3

6 const absDir = resolve(process.cwd(), agentDir);

7 if (!existsSync(absDir)) {

8 throw new Error(`Agent directory not found: ${absDir}`);

9 }

10 const agentFile = resolve(absDir, "agent.ts");

11 let config = { model: "gpt-4o" };

12 if (existsSync(agentFile)) {

13 try {

14 const mod = await import(agentFile);

15 if (mod.default) {

16 config = { ...config, ...mod.default };

17 }

18 }

19 catch {

20 // fall back to defaults

21 }

22 }

23 const instructions = loadInstructionsFile(absDir);