registry / bestie-agent / 0.1.10

bestie-agent@0.1.10

Vietnamese-first bestie agent CLI.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 76 file(s), 506 KB of source, external domains: api.openai.com, api.telegram.org, bot-api.zaloplatforms.com, example.com, huggingface.co, registry.npmjs.org

Source & flagged code

2 flagged

dist/tools/local-action-tools.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { mkdir, readFile, stat, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/local-action-tools.jsView on unpkg · L1

3import { dirname, relative } from "node:path";

4import { DEFAULT_INTERNAL_EXEC_TIMEOUT_MS } from "../runtime/config.js";

5import { getAgentWorkspacePath, resolveWorkspacePath } from "../runtime/workspace.js";

6import { reviewActionPermission } from "../safety/permission-policy.js";

7const MAX_WRITE_BYTES = 256 * 1024;

8const MAX_EDIT_BYTES = 256 * 1024;

9const MAX_PATCH_BYTES = 256 * 1024;

10const MAX_EXEC_OUTPUT_BYTES = 48 * 1024;

11const MAX_EXEC_TIMEOUT_MS = 10 * 60_000;

12export async function writeLocalFileTool(options) {

13 const permission = await reviewInternalToolPermission(options, "internal.write_file", "local_write", options.path, "Write a local project file requested by the agent.");

14 if (!permission.allowed)

15 return { ...permission };

16 const contentBuffer = Buffer.from(options.content, "utf8");

17 if (contentBuffer.length > MAX_WRITE_BYTES) {

18 return { allowed: false, reason: `Content exceeds ${MAX_WRITE_BYTES} bytes.` };

19 }

20 const resolvedPath = resolveLocalActionPath(options, options.path);

21 if (isIgnoredProjectPath(relative(options.paths.rootDir, resolvedPath))) {

dist/cli/commands/update.jsView file

Lines 40-80javascript

40 }

41 spinner.stop();

42 writeLine(title("Bestie Update"));

43 writeLine(keyValue("Current", result.currentVersion));

44 writeLine(keyValue("Latest", result.latestVersion));

45 if (!

Source & flagged code

2 flagged · loading source

dist/tools/local-action-tools.jsView file

1import { spawn } from "node:child_process"; L2: import { mkdir, readFile, stat, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/local-action-tools.jsView on unpkg · L1

dist/cli/commands/update.jsView file

60} L61: writeError(`npm install exited with code ${exitCode}.`); L62: process.exitCode = exitCode; ... L74: return new Promise((resolve) => { L75: const child = spawn("npm", ["install", "-g", `${packageName}@latest`], { stdio: "inherit" }); L76: child.on("error", () => resolve(1));

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli/commands/update.jsView on unpkg · L60

Findings

3 High3 Medium6 Low

HighChild Processdist/tools/local-action-tools.js

HighShell

HighRuntime Package Installdist/cli/commands/update.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/tools/local-action-tools.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { mkdir, readFile, stat, writeFile } from "node:fs/promises";

High

Child Process

Package source references child process execution.

dist/tools/local-action-tools.jsView on unpkg · L1

3import { dirname, relative } from "node:path";

4import { DEFAULT_INTERNAL_EXEC_TIMEOUT_MS } from "../runtime/config.js";

5import { getAgentWorkspacePath, resolveWorkspacePath } from "../runtime/workspace.js";

6import { reviewActionPermission } from "../safety/permission-policy.js";

7const MAX_WRITE_BYTES = 256 * 1024;

8const MAX_EDIT_BYTES = 256 * 1024;

9const MAX_PATCH_BYTES = 256 * 1024;

10const MAX_EXEC_OUTPUT_BYTES = 48 * 1024;

11const MAX_EXEC_TIMEOUT_MS = 10 * 60_000;

12export async function writeLocalFileTool(options) {

13 const permission = await reviewInternalToolPermission(options, "internal.write_file", "local_write", options.path, "Write a local project file requested by the agent.");

14 if (!permission.allowed)

15 return { ...permission };

16 const contentBuffer = Buffer.from(options.content, "utf8");

17 if (contentBuffer.length > MAX_WRITE_BYTES) {

18 return { allowed: false, reason: `Content exceeds ${MAX_WRITE_BYTES} bytes.` };

19 }

20 const resolvedPath = resolveLocalActionPath(options, options.path);

21 if (isIgnoredProjectPath(relative(options.paths.rootDir, resolvedPath))) {

dist/cli/commands/update.jsView file

Lines 40-80javascript

40 }

41 spinner.stop();

42 writeLine(title("Bestie Update"));

43 writeLine(keyValue("Current", result.currentVersion));

44 writeLine(keyValue("Latest", result.latestVersion));

45 if (!