arcy.js@0.1.12
ARCY, the universal JavaScript utility for embedding an AI agent that talks to, learns from, and acts on behalf of your users.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe manifest has no install-time execution hook, and inspected POST behavior sends a bearer session token to the package's own API for flow catalog access. The scanner's callback hint is consistent with this package function; the secret-pattern hint was not substantiated by inspected source.
Static reason
One or more suspicious static signals were detected.
Trigger
A consumer invokes the flow catalog client.
Impact
No unrelated recipient or malicious behavior was established from the inspected source.
Mechanism
The client sends a session token to the package vendor's default API endpoint.
AI rationale
The manifest has no install-time execution hook, and inspected POST behavior sends a bearer session token to the package's own API for flow catalog access. The scanner's callback hint is consistent with this package function; the secret-pattern hint was not substantiated by inspected source.
Network endpoints1
api.arcyai.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares only a prepublishOnly hook, which runs the build; no install lifecycle hook is present.
- The API client defaults to arcy.js's API and sends its session token as a bearer credential in a flow catalog request.
- The flagged POST is part of the package's flow API client, rather than an unrelated callback.
Evidence against
Behavioral surface
Network
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/chunk-NKFEZTTN.jsView file
261patternName = generic_password
severity = medium
line = 261
Medium
dist/index.cjsView file
•Trigger-reachable fixed external POST callback chain: manifest.main -> dist/index.cjs
/* arcy.js — https://arcyai.com */
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
async function postFlowAnswer(flowCvid, body, options) {
method: "POST",
body: JSON.stringify({ ...body, ...sessionId ? { sessionId } : {} }),
High
Trigger Reachable External Post Callback
A manifest entrypoint or package-local install chain reaches a fixed external POST callback.
dist/index.cjsView on unpkg2457function headers(sessionToken) {
return {
"Content-Type": "application/json",
Authorization: `Bearer ${sessionToken}`
};
}
async function fetchFlowCatalog(options) {
const {
apiBase = DEFAULT_API_BASE,
sessionToken,
sessionId,
setTimeoutImpl = (fn, ms) => setTimeout(fn, ms),
timeoutMs = FLOW_FETCH_TIMEOUT_MS
} = options;
const fetchImpl = resolveFetc
Findings
1 High3 Medium8 Low
HighTrigger Reachable External Post Callbackdist/index.cjs
MediumSecret Patterndist/chunk-NKFEZTTN.js
MediumNetwork
MediumSecret Patterndist/control-resolver.cjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.cjs
LowAi Review Evidencedist/index.cjs
Affected versions and remediation
This report applies to arcy.js@0.1.12.
See all versions of arcy.js for other recorded verdicts.
- Review the evidence and your use of arcy.js@0.1.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.