arcy.js@0.2.5
ARCY, the universal JavaScript utility for embedding an AI agent that talks to, learns from, and acts on behalf of your users.
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe inspected source supports a benign embedded browser SDK: its fixed POST sends telemetry to the package’s own API and omits ambient cookies. The password-related match is only an input-kind label, and no malicious install behavior or unrelated credential transfer was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
The embedded SDK records an allowed event and flushes a batch.
Impact
The API receives product telemetry. The inspected source does not establish secret theft or an unrelated credential transfer.
Mechanism
It sends event batches to the package API using its configured token; the request omits ambient browser credentials. Limited measurement is possible under the source’s separate measurement gate.
AI rationale
The inspected source supports a benign embedded browser SDK: its fixed POST sends telemetry to the package’s own API and omits ambient cookies. The password-related match is only an input-kind label, and no malicious install behavior or unrelated credential transfer was identified.
Evidence
package.jsondist/index.cjsdist/index.jsdist/chat-XX5QSQOG.jsdist/chunk-NKFEZTTN.js
Network endpoints2
api.arcyai.com/api/v1/sdk/telemetryapi.arcyai.com/api/v1/sdk/measurement
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest selects the bundled CommonJS and ESM entrypoints and declares a prepublishOnly build script.
- The fixed POST endpoint belongs to the SDK telemetry transport and uses the package’s API host.
- Telemetry batches use the configured token and omit ambient browser credentials.
- Full telemetry requires a recorded grant; limited measurements are separately gated and restricted to an event allowlist.
- The password-related scanner match is an input-kind label, not credential material.
- The ESM entrypoint and chat bundle import package-local components consistent with an embedded SDK.
Evidence against
Behavioral surface
Network
HighEntropyStringsTelemetryUrlStrings
Source & flagged code
6 flaggeddist/chunk-NKFEZTTN.jsView file
261patternName = generic_password
severity = medium
line = 261
Medium
dist/index.cjsView file
•Trigger-reachable fixed external POST callback chain: manifest.main -> dist/index.cjs
/* arcy.js — https://arcyai.com */
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
method: "POST",
body: JSON.stringify(sessionId ? { sessionId } : {}),
async function postFlowAnswer(flowCvid, body, options) {
method: "POST",
body: JSON.stringify({ ...body, ...sessionId ? { sessionId } : {} }),
High
Trigger Reachable External Post Callback
A manifest entrypoint or package-local install chain reaches a fixed external POST callback.
dist/index.cjsView on unpkg25231var DEFAULT_API_BASE5 = "https://api.arcyai.com";
var TELEMETRY_PATH = "/api/v1/sdk/telemetry";
var MEASUREMENT_PATH = "/api/v1/sdk/measurement";
function utf8Length(value) {
let byte
Findings
1 High3 Medium8 Low
HighTrigger Reachable External Post Callbackdist/index.cjs
MediumSecret Patterndist/chunk-NKFEZTTN.js
MediumNetwork
MediumSecret Patterndist/control-resolver.cjs
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencepackage.json
LowAi Review Evidencedist/index.cjs
Affected versions and remediation
This report applies to arcy.js@0.2.5.
See all versions of arcy.js for other recorded verdicts.
- Review the evidence and your use of arcy.js@0.2.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.