registry / athena-agent-launcher / 0.3.4

athena-agent-launcher@0.3.4

Run an Athena-configured agent locally. Resolves runtime + bindings from the Athena control plane and spawns the correct agent binary (Anthropic SDK, OpenClaw, or Hermes).

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 52.0 KB of source, external domains: 0.0.0.0, 127.0.0.1, athena-v2-pi.vercel.app, hermes-agent.nousresearch.com

Source & flagged code

4 flagged

bin/launcher.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// athena-agent-launcher

3//

4// Usage:

5// npx athena-agent-launcher run <agent-id> [--base-url URL] [--api-key ak_...]

6//

7// Reads runtime config from Athena's control plane and spawns the

8// configured runtime (anthropic_sdk | openclaw | hermes). Secrets are

9// resolved at runtime by the spawned process via ATHENA_GATEWAY_URL — the

10// launcher itself never sees raw Anthropic or Cortex credentials.

12import { spawn } from "node:child_process";

13import { readFileSync, existsSync, mkdirSync, writeFileSync, chmodSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/launcher.mjsView on unpkg · L11

14import { homedir } from "node:os";

15import { join, dirname } from "node:path";

16import readline from "node:readline";

17import { startWebChat } from "../lib/webchat.mjs";

18import { startHostedGateway } from "../lib/hosted-gateway.mjs";

20const DEFAULT_BASE_URL = "https://athena-v2-pi.vercel.app";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/launcher.mjsView on unpkg · L11

22function parseArgs(argv) {

23 const args = { _: [] };

24 for (let i = 0; i < argv.length; i++) {

25 const a = argv[i];

26 if (a === "--base-url") args.baseUrl = argv[++i];

27 else if (a === "--api-key") args.apiKey = argv[++i];

28 else if (a === "--runtime-cmd") args.runtimeCmd = argv[++i];

29 else if (a === "--manifest-only") args.manifestOnly = true;

30 else if (a === "--help" || a === "-h") args.help = true;

31 else args._.push(a);

Lines 174-233javascript

174 const first = out

175 .split(/\r?\n/)

176 .map((s) => s.trim())

177 .filter(Boolean)[0];

178 resolve(first || null);

Source & flagged code

4 flagged · loading source

bin/launcher.mjsView file

11L12: import { spawn } from "node:child_process"; L13: import { readFileSync, existsSync, mkdirSync, writeFileSync, chmodSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/launcher.mjsView on unpkg · L11

194c = isWin L195: ? // Native Windows installer (PowerShell). Hermes' CLI + ACP run L196: // natively; only its own dashboard pane needs WSL2, which we don't use.

High

Shell

Package source references shell execution.

bin/launcher.mjsView on unpkg · L194

213// user only ever sees Athena's UX. L214: spawn( L215: "bash", ... L217: "-c", L218: "curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash -s -- --skip-setup", L219: ], ... L228: if (code !== 0) { L229: process.stderr.write( L230: "[athena-agent] Hermes install failed. On Windows you can also install it manually\n" +

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/launcher.mjsView on unpkg · L213

11L12: import { spawn } from "node:child_process"; L13: import { readFileSync, existsSync, mkdirSync, writeFileSync, chmodSync } from "node:fs"; ... L19: L20: const DEFAULT_BASE_URL = "https://athena-v2-pi.vercel.app"; L21: ... L36: function loadCredsFile() { L37: const p = join(homedir(), ".athena", "credentials.json"); L38: if (!existsSync(p)) return {}; L39: try { L40: return JSON.parse(readFileSync(p, "utf8")); L41: } catch {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/launcher.mjsView on unpkg · L11

Findings

4 High3 Medium3 Low

HighChild Processbin/launcher.mjs

HighShellbin/launcher.mjs

HighCommand Output Exfiltrationbin/launcher.mjs

HighSandbox Evasion Gated Capabilitybin/launcher.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

bin/launcher.mjsView file

Lines 1-31javascript

1#!/usr/bin/env node

2// athena-agent-launcher

3//

4// Usage:

5// npx athena-agent-launcher run <agent-id> [--base-url URL] [--api-key ak_...]

6//

7// Reads runtime config from Athena's control plane and spawns the

8// configured runtime (anthropic_sdk | openclaw | hermes). Secrets are

9// resolved at runtime by the spawned process via ATHENA_GATEWAY_URL — the

10// launcher itself never sees raw Anthropic or Cortex credentials.

12import { spawn } from "node:child_process";

13import { readFileSync, existsSync, mkdirSync, writeFileSync, chmodSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/launcher.mjsView on unpkg · L11

14import { homedir } from "node:os";

15import { join, dirname } from "node:path";

16import readline from "node:readline";

17import { startWebChat } from "../lib/webchat.mjs";

18import { startHostedGateway } from "../lib/hosted-gateway.mjs";

20const DEFAULT_BASE_URL = "https://athena-v2-pi.vercel.app";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

bin/launcher.mjsView on unpkg · L11

22function parseArgs(argv) {

23 const args = { _: [] };

24 for (let i = 0; i < argv.length; i++) {

25 const a = argv[i];

26 if (a === "--base-url") args.baseUrl = argv[++i];

27 else if (a === "--api-key") args.apiKey = argv[++i];

28 else if (a === "--runtime-cmd") args.runtimeCmd = argv[++i];

29 else if (a === "--manifest-only") args.manifestOnly = true;

30 else if (a === "--help" || a === "-h") args.help = true;

31 else args._.push(a);

Lines 174-233javascript

174 const first = out

175 .split(/\r?\n/)

176 .map((s) => s.trim())

177 .filter(Boolean)[0];

178 resolve(first || null);