arcy.js@0.1.17
ARCY, the universal JavaScript utility for embedding an AI agent that talks to, learns from, and acts on behalf of your users.
AI Security Review
scanned 28d ago · by lpm-firewall-aiSource inspection found vendor-directed runtime event reporting and a prepublish build hook, but no install-time attack, credential harvesting, or unrelated recipient. The scanner’s declaration-file finding points to type documentation rather than executable code.
Static reason
One or more suspicious static signals were detected.
Trigger
Application code invokes the SDK reporter and supplies a fetch implementation and API token.
Impact
This supports SDK event reporting, with no inspected evidence of unrelated credential exposure or install-time compromise.
Mechanism
The reporter posts event tool and name data to the configured API base; the bundled default is api.arcyai.com.
AI rationale
Source inspection found vendor-directed runtime event reporting and a prepublish build hook, but no install-time attack, credential harvesting, or unrelated recipient. The scanner’s declaration-file finding points to type documentation rather than executable code.
Network endpoints1
api.arcyai.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has a prepublishOnly build hook and no install-time lifecycle hook.
- The seen-event reporter posts tool and name data through an injected fetch function to an API base; the bundled default is api.arcyai.com.
- The flagged design-mode file is a TypeScript declaration describing an event fingerprint, not executable behavior.
Evidence against
- No inspected source showed an install-time mutation, secret harvesting, or a package-controlled unrelated network recipient.
Behavioral surface
Network
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/chunk-NKFEZTTN.jsView file
261patternName = generic_password
severity = medium
line = 261
Medium
dist/index.cjsView file
•Trigger-reachable fixed external POST callback chain: manifest.main -> dist/index.cjs
/* arcy.js — https://arcyai.com */
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
async function postFlowAnswer(flowCvid, body, options) {
method: "POST",
body: JSON.stringify({ ...body, ...sessionId ? { sessionId } : {} }),
High
Trigger Reachable External Post Callback
A manifest entrypoint or package-local install chain reaches a fixed external POST callback.
dist/index.cjsView on unpkg25493function post(tool, names) {
if (!fetchImpl || names.length === 0) return;
try {
const request = fetchImpl(`${apiBase}${SEEN_REPORT_PATH}`, {
method: "POST",
headers: {
"Content-
Findings
2 High3 Medium7 Low
HighTrigger Reachable External Post Callbackdist/index.cjs
HighSemantic Analysis Limiteddist/design-mode.d.ts
MediumSecret Patterndist/chunk-NKFEZTTN.js
MediumNetwork
MediumSecret Patterndist/control-resolver.cjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/index.cjs
Affected versions and remediation
This report applies to arcy.js@0.1.17.
See all versions of arcy.js for other recorded verdicts.
- Review the evidence and your use of arcy.js@0.1.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.