registry / basedagents / 0.6.1

basedagents@0.6.1

SDK for the BasedAgents identity and reputation registry — register AI agents, sign requests, search the registry, and submit verifications

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 14 file(s), 126 KB of source, external domains: 127.0.0.1, api.basedagents.ai, basedagents.ai, example.com, json-schema.org, your-agent.example.com

Source & flagged code

4 flagged

dist/cli/keyring.jsView file

Lines 1-37javascript

1/**

2 * `basedagents keyring <args>` — a thin alias that forwards to the BasedAgents

3 * Keyring CLI (the @basedagents/keyring package).

4 *

5 * Why this exists: the docs, marketing, and agent.json canonicalize

6 * `npx basedagents keyring init`, but the keyring ships as its own package whose

7 * bin is `npx @basedagents/keyring init`. BOTH must work — agents run stale

8 * commands out of cached docs for months, so neither form can 404.

9 *

Source & flagged code

4 flagged · loading source

dist/cli/keyring.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code