registry / arterm-cli / 0.2.0

arterm-cli@0.2.0

Local AI coding agent for your terminal — Ollama, llama.cpp, and OpenAI-compatible providers, a rich Ink TUI, and permission-gated file/shell tools.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 1.52 MB of source, external domains: 127.0.0.1, agentrouter.org, api.anthropic.com, api.deepseek.com, api.groq.com, api.mistral.ai, api.openai.com, api.x.ai, claude.ai, console.anthropic.com, docs.anthropic.com, docs.expo.dev, generativelanguage.googleapis.com, github.com, html.duckduckgo.com, json-schema.org, openrouter.ai, platform.claude.com, raw.githubusercontent.com, spec.openapis.org, stackoverflow.com, tools.ietf.org, www.safaribooksonline.com, www.w3.org

Source & flagged code

6 flagged

dist/node-IPA4RDRJ.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2import {

3 AnthropicError,

4 ToolError,

5 __classPrivateFieldGet,

6 __classPrivateFieldSet,

7 loggerFor,

8 promiseWithResolvers

9} from "./chunk-4CH53UGX.js";

10import "./chunk-77HVPD4G.js";

12// ../../node_modules/.pnpm/@anthropic-ai+sdk@0.105.0_zod@3.25.76/node_modules/@anthropic-ai/sdk/tools/agent-toolset/node.mjs

13import * as fs3 from "fs/promises";

14import * as fssync2 from "fs";

15import * as path3 from "path";

16import * as cp from "child_process";

17import * as crypto from "crypto";

High

Child Process

Package source references child process execution.

dist/node-IPA4RDRJ.jsView on unpkg · L15

18import * as readline from "readline";

20// ../../node_modules/.pnpm/@anthropic-ai+sdk@0.105.0_zod@3.25.76/node_modules/@anthropic-ai/sdk/helpers/beta/json-schema.mjs

21function betaTool(options) {

22 if (options.inputSchema.type !== "object") {

23 throw new Error(`JSON schema for tool "${options.name}" must be an object, but got ${options.inputSchema.type}`);

24 }

25 return {

26 type: "custom",

27 name: options.name,

28 input_schema: options.inputSchema,

29 description: options.description,

30 run: options.run,

31 parse: (content) => content,

32 ...options.close ? { close: options.close } : {}

33 };

34}

dist/main.jsView file

Lines 266-306javascript

266 ostring: () => ostring,

267 pipeline: () => pipelineType,

268 preprocess: () => preprocessType,

269 promise: () => promiseType,

270 quotelessJson: () => quotelessJson,

271 record: () => recordType,

dist/chunk-7K63YC2W.jsView file

Lines 2928-2968javascript

2928 validateName,

2929 ValidationError: _ValidationError,

2930 schema: sch.schema,

2931 schemaEnv: sch,

2932 rootId,

2933 baseId: sch.baseId || rootId,

2934 schemaPath: codegen_1.nil,

2935 errSchemaPath: sch.schemaPath ||

Source & flagged code

6 flagged · loading source

dist/node-IPA4RDRJ.jsView file

15import * as path3 from "path"; L16: import * as cp from "child_process"; L17: import * as crypto from "crypto";

High

Child Process

Package source references child process execution.

dist/node-IPA4RDRJ.jsView on unpkg · L15

dist/main.jsView file

6849// ../tools/dist/index.js L6850: import { execa } from "execa"; L6851: import { realpathSync as realpathSync2 } from "fs";

High

Shell

Package source references shell execution.

dist/main.jsView on unpkg · L6849

286Cross-file remote execution chain: dist/main.js spawns dist/chunk-7K63YC2W.js; helper contains network access plus dynamic code execution. L286: // ../core/dist/index.js L287: import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto"; L288: import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs"; ... L302: import { promises as fs6 } from "fs"; L303: import { execFile } from "child_process"; L304: import { randomUUID as randomUUID4 } from "crypto"; ... L450: function defaultListenerErrorHandler(error, event) { L451: if (process.env.ARTERM_DEBUG) { L452: const msg = error instanceof Error ? error.stack ?? error.message : String(error); L453: process.stderr.write(`event listener threw on "${event.type}": ${msg} L454: `); ... L482: };

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/main.jsView on unpkg · L286

1125async create(_meta) { L1126: const { randomUUID: randomUUID52 } = await import("crypto"); L1127: const id = randomUUID52();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/main.jsView on unpkg · L1125

286// ../core/dist/index.js L287: import { createCipheriv, createDecipheriv, randomBytes, scryptSync } from "crypto"; L288: import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs"; ... L302: import { promises as fs6 } from "fs"; L303: import { execFile } from "child_process"; L304: import { randomUUID as randomUUID4 } from "crypto"; ... L450: function defaultListenerErrorHandler(error, event) { L451: if (process.env.ARTERM_DEBUG) { L452: const msg = error instanceof Error ? error.stack ?? error.message : String(error); L453: process.stderr.write(`event listener threw on "${event.type}": ${msg} L454: `); ... L482: };

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/main.jsView on unpkg · L286

dist/chunk-7K63YC2W.jsView file

2948sourceCode = this.opts.code.process(sourceCode, sch); L2949: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); L2950: const validate = makeValidate(this, this.scope.get());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-7K63YC2W.jsView on unpkg · L2948

Findings

3 High4 Medium8 Low

HighChild Processdist/node-IPA4RDRJ.js

HighShelldist/main.js

HighCross File Remote Execution Contextdist/main.js

MediumDynamic Requiredist/main.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/chunk-7K63YC2W.js

LowWeak Cryptodist/main.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/node-IPA4RDRJ.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2import {

3 AnthropicError,

4 ToolError,

5 __classPrivateFieldGet,

6 __classPrivateFieldSet,

7 loggerFor,

8 promiseWithResolvers

9} from "./chunk-4CH53UGX.js";

10import "./chunk-77HVPD4G.js";

12// ../../node_modules/.pnpm/@anthropic-ai+sdk@0.105.0_zod@3.25.76/node_modules/@anthropic-ai/sdk/tools/agent-toolset/node.mjs

13import * as fs3 from "fs/promises";

14import * as fssync2 from "fs";

15import * as path3 from "path";

16import * as cp from "child_process";

17import * as crypto from "crypto";

High

Child Process

Package source references child process execution.

dist/node-IPA4RDRJ.jsView on unpkg · L15

18import * as readline from "readline";

20// ../../node_modules/.pnpm/@anthropic-ai+sdk@0.105.0_zod@3.25.76/node_modules/@anthropic-ai/sdk/helpers/beta/json-schema.mjs

21function betaTool(options) {

22 if (options.inputSchema.type !== "object") {

23 throw new Error(`JSON schema for tool "${options.name}" must be an object, but got ${options.inputSchema.type}`);

24 }

25 return {

26 type: "custom",

27 name: options.name,

28 input_schema: options.inputSchema,

29 description: options.description,

30 run: options.run,

31 parse: (content) => content,

32 ...options.close ? { close: options.close } : {}

33 };

34}

dist/main.jsView file

Lines 266-306javascript

266 ostring: () => ostring,

267 pipeline: () => pipelineType,

268 preprocess: () => preprocessType,

269 promise: () => promiseType,

270 quotelessJson: () => quotelessJson,

271 record: () => recordType,

dist/chunk-7K63YC2W.jsView file

Lines 2928-2968javascript

2928 validateName,

2929 ValidationError: _ValidationError,

2930 schema: sch.schema,

2931 schemaEnv: sch,

2932 rootId,

2933 baseId: sch.baseId || rootId,

2934 schemaPath: codegen_1.nil,

2935 errSchemaPath: sch.schemaPath ||

Lines 6829-6869javascript

6829 const providers = [

6830 new OllamaProvider({ host: config.ollamaHost }),

6831 new LlamaCppProvider({ modelsDir: config.modelsDir }),

6832 new OpenAICompatProvider({

6833 baseUrl: config.openaiCompatHost,

6834 apiKey: apiKeyFor("openai-compat", "OPENAI_API_KEY"),

6835 headers: config.openaiCompatHeaders

6836 })

6837 ];

6838 const anthropicOAuth = accessTokenResolver("anthropic");

6839 const anthropicKey = apiKeyFor("anthropic", "ANTHROPIC_API_KEY");

6840 if (anthropicOAuth) providers.push(new AnthropicProvider({ getAccessToken: anthropicOAuth }));

6841 else if (anthropicKey) providers.push(new AnthropicProvider({ apiKey: anthropicKey }));

6842 for (const [id, preset] of Object.entries(OPENAI_COMPAT_PRESETS)) {

6843 const apiKey = apiKeyFor(id, preset.envVar);

6844 if (apiKey) providers.push(new OpenAICompatProvider({ id, baseUrl: preset.baseUrl, apiKey }));

6845 }

6846 return providers;

6847}

6848

6849// ../tools/dist/index.js

6850import { execa } from "execa";

6851import { realpathSync as realpathSync2 } from "fs";

High

Shell

Package source references shell execution.

dist/main.jsView on unpkg · L6849

6852import { basename, dirname as dirname3, isAbsolute as isAbsolute2, relative, resolve, sep } from "path";

6853import { promises as fs22 } from "fs";

6854import { promises as fs10 } from "fs";

6855import { join as join10, relative as relative2, sep as sep2 } from "path";

6856import { execa as execa2 } from "execa";

6857import fg from "fast-glob";

6858import { promises as fs32 } from "fs";

6859import fg2 from "fast-glob";

6860import { promises as fs42 } from "fs";

6861import { promises as fs52 } from "fs";

6862import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";

6863import { join as join22 } from "path";

6864import { execa as execa3 } from "execa";

6865import { promises as fs62 } from "fs";

6866import { createHash as createHash4 } from "crypto";

6867import { promises as fs72 } from "fs";

6868import { join as join32, relative as relative3, sep as sep3 } from "path";

6869import { lookup } from "dns/promises";