Filesystem-first framework for durable backend AI agents that run anywhere.
AI Security Review
scanned 3mo ago · by lpm-firewall-ai
Scanner hits map to an AI-agent framework's intended CLI, web-fetch, and deployment-artifact capabilities. Direct inspection found no lifecycle execution or concrete malicious chain.
Explicit eve CLI invocation or an application using configured framework tools.
Impact
No unconsented execution, credential exfiltration, persistence, or foreign AI-agent control-surface modification established.
Mechanism
User-configured agent framework, CLI build bootstrap, and Vercel artifact generation.
AI rationale
Scanner hits map to an AI-agent framework's intended CLI, web-fetch, and deployment-artifact capabilities. Direct inspection found no lifecycle execution or concrete malicious chain.
1import{a as e,i as t,r as n,t as r}from"../../_chunks/workflow/chunk-BHKSVoKr.js";import{a as i,c as a,h as o,l as s,m as c,n as l,o as u,p as d}from"../../_chunks/workflow/dist-Ct...
L2: `).map(e=>{let n=e.match(/^\s*at\s+(?:(.+?)\s+\()?(.+?):(\d+):(\d+)\)?$/);if(!n)return e;let[,i,a,o,s]=n;if(!a.includes(t))return e;let c=parseInt(o,10),l=parseInt(s,10),u=Ti(r,{li...
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
1import{a as e,i as t,t as n}from"../../_chunks/workflow/chunk-BHKSVoKr.js";import{i as r,n as i,r as a,t as o}from"../../_chunks/workflow/dist-CttsoN4D.js";import{E as s,d as c,g a...
L2: `);for(let e of r){let r=e.trim().split(/\s+/);if(r.length<5||r[0]?.toUpperCase()!==`TCP`)continue;let[,i,,a,o]=r;if(a?.toUpperCase()!==`LISTENING`||o!==t.toString())continue;let s...
L3: `).slice(1);for(let e of t){if(!e.trim())continue;let t=e.trim().split(/\s+/);if(t.length<10)continue;let n=t[1],i=t[3],o=t[9];if(!n||i!==`0A`||!o||!r.has(o))continue;let s=n.index...
L4: `);for(let e of r)if(e.includes(`LISTEN`)){let t=e.trim().split(/\s+/)[8];if(t){let e=t.lastIndexOf(`:`);if(e!==-1){let r=Oe(t.slice(e+1));r!==void 0&&n.push(r)}}}return n}catch{re...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
1import{AISDKError as e,APICallError as t,EmptyResponseBodyError as n,InvalidArgumentError as r,InvalidResponseDataError as i,JSONParseError as a,LoadAPIKeyError as o,NoSuchProvider...
L2: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L3: `))}};const Kt={major:4,minor:4,patch:3},C=p(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=Kt;let r=[...e._zod.def.checks??[]];e._zod.traits...
L4: if (${n}.issues.length) {
...
L72: ${i}`,l++;return}if(jc(e,t,r)){u=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+...
L73: ${t}`,l+
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
26`,o?1+l:l),o=!0,s=!0,l=0,r=e.position;!x(h)&&h!==0;)h=e.input.charCodeAt(++e.position);I(e,r,e.position,!1)}return!0}function J(e,t){var n,r=e.tag,i=e.anchor,a=[],o,s=!1,c;for(e.anchor!==null&&(e.anchorMap[e.anchor]=a),c=e.input.charCodeAt(e.position);c!==0&&!(c!==45||(o=e.input.charCodeAt(e.position+1),!C(o)));){if(s=!0,e.position++,B(e,!0,-1)&&e.lineIndent<=t){a.push(null),c=e.input.charCodeAt(e.position);continue}if(n=e.line,Z(e,t,u,!1,!0),a.push(e.result),B(e,!0,-1),c=e.input.charCodeAt(e.position),(e.line===n||e.lineIndent>t)&&c!==0)N(e,`bad indentation of a sequence entry`);else if(e.lin ...
1import{a as e,i as t,t as n}from"../../_chunks/workflow/chunk-BHKSVoKr.js";import{i as r,n as i,r as a,t as o}from"../../_chunks/workflow/dist-CttsoN4D.js";import{E as
1import{AISDKError as e,APICallError as t,EmptyResponseBodyError as n,InvalidArgumentError as r,InvalidResponseDataError as i,JSONParseError as a,LoadAPIKeyError as o,NoSuchProvider...
L2: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L3: `))}};const Kt={major:4,minor:4,patch:3},C=p(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=Kt;let r=[...e._zod.def.checks??[]];e._zod.traits...
L4: if (${n}.issues.length) {
...
L72: ${i}`,l++;return}if(jc(e,t,r)){u=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+...
L73: ${t}`,l+
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
42`:``}function pe(e,t){return fe(e,n.extend({schema:a},t))}t.exports.dump=fe,t.exports.safeDump=pe})),require_js_yaml$1=__commonJSMin(((e,t)=>{var n=require_loader(),r=require_dumper();function i(e){return function(){throw Error(`Function `+e+` is deprecated and cannot be used.`)}}t.exports.Type=require_type(),t.exports.Schema=require_schema(),t.exports.FAILSAFE_SCHEMA=require_failsafe(),t.exports.JSON_SCHEMA=require_json(),t.exports.CORE_SCHEMA=require_core(),t.exports.DEFAULT_SAFE_SCHEMA=require_default_safe(),t.exports.DEFAULT_FULL_SCHEMA=require_default_full(),t.exports.load=n.load,t.export ...
43return `+str.trim()+`;
44}());`),eval(str)||{}}catch(e){if(wrap!==!1&&/(unexpected|identifier)/i.test(e.message))returnparse(str,options,!1);throwSyntaxError(e)}},stringify:function(){throwError(`stringifying JavaScript is not supported`)}}})),require_strip_bom_string=__commonJSMin(((e,t)=>{t.exports=function(e){returntypeof e==`string`&&e.charAt(0)===``?e.slice(1):e}})),require_utils=__commonJSMin((e=>{let t=require_strip_bom_string(),n=require_kind_of();e.define=function(e,t,n){Reflect.defineProperty(e,t,{enumerable:!1,configurable:!0,writable:!0,value:n})},e.isBuffer=function(e){returnn(e)===`buffer`},e.isObj ...
45`?e:e+`
Low
Eval
Package source references a known benign dynamic code generation pattern.
2`))}async function terminate(e){e.exitCode!==null||e.killed||(e.kill(`SIGTERM`),await Promise.race([once(e,`exit`),setTimeout(2e4).then(()=>`timeout`)])===`timeout`&&e.exitCode===null&&(e.kill(`SIGKILL`),await once(e,`exit`)),e.stdout?.destroy(),e.stderr?.destroy())}function once(e,t){return new Promise(n=>{e.once(t,()=>n())})}async function startProductionServer(e,n={}){let o=resolve(e),s=resolveOutputServerEntry(o);if(!existsSync(s))throw Error(`Missing eve build output at ${s}. Run "eve build" before "eve start".`);loadDevelopmentEnvironmentFiles(o),await prewarmBuiltAppSandboxes({appRoot:o ...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src/internal/nitro/host/start-production-server.jsView on unpkg · L1
3`)))})});h.catch(()=>void0);try{return{asyncclose(){f=!0,awaitterminate(m)},url:awaitwaitForReady({child:m,getStartError:()=>p,getOutput:()=>d,knownUrl:u}),asyncwait(){await h}}}catch(e){throw f=!0,awaitterminate(m),isRecord(e)&&e.name===`AbortError`?Error(`Timed out waiting for built eve server to respond.`,{cause:e}):e}}export{startProductionServer};
Long lines were clipped for display.
s,d
as
c,g
as
l,o
as
u,r
as
d,u
as
f,w
as
p}
from
"../../_chunks/workflow/dist-BYo8Gno2.js"
;
import
{B
as
m,D
as
h,G
as
g,H
as
_,J
as
v,L
as
y,M
as
b,N
as
x,O
as
ee,R
as
te,U
as
S,V
as
ne,Y
as
re,Z
as
C,_
as
w,at
as
T,c
as
ie,et
as
ae,f
as
oe,j
as
E,k
as
se,m
as
ce,n
as
le,o
as
D,r
as
ue,rt
as
O,s
as
de,st
as
k,u
as
A,y
as
j,z
as
M}
from
"../../_chunks/workflow/dist-CSfKNxQW.js"
;
import
{t
as
N}
from
"../../_chunks/workflow/undici-fb54XL8 ..
.
2`);for(let e of r){let r=e.trim().split(/\s+/);if(r.length<5||r[0]?.toUpperCase()!==`TCP`)continue;let[,i,,a,o]=r;if(a?.toUpperCase()!==`LISTENING`||o!==t.toString())continue;let s=i.lastIndexOf(`:`);if(s===-1)continue;let c=Te(i.slice(s+1));c!==void 0&&n.push(c)}return n}const De=fe(Se);function Oe(e,t=10){let n=parseInt(e,t);if(!Number.isNaN(n)&&n>=0&&n<=65535)return n}const ke=((e,t)=>e.join(t))([``,`proc`],`/`);async function Ae(e){let t=[`${ke}/net/tcp`,`${ke}/net/tcp6`],n=[],r=new Set,i=`${ke}/${e}/fd`;try{let e=(await _e(i)).sort((e,t)=>Number.parseInt(e,10)-Number.parseInt(t,10)),t=awa ...
3`).slice(1);for(let e of t){if(!e.trim())continue;let t=e.trim().split(/\s+/);if(t.length<10)continue;let n=t[1],i=t[3],o=t[9];if(!n||i!==`0A`||!o||!r.has(o))continue;let s=n.indexOf(`:`);if(s===-1)continue;let c=n.slice(s+1);if(!c)continue;let l=Oe(c,16);l!==void0&&a.set(o,l)}}catch{}let o=[];for(let e of n){let t=a.get(e);t!==void0&&o.push(t)}return o}asyncfunctionje(e){try{let{stdout:t}=awaitDe(`lsof`,[`-a`,`-i`,`-P`,`-n`,`-p`,e.toString()]),n=[],r=t.split(`
4`);for(let e of r)if(e.includes(`LISTEN`)){let t=e.trim().split(/\s+/)[8];if(t){let e=t.lastIndexOf(`:`);if(e!==-1){let r=Oe(t.slice(e+1));r!==void0&&n.push(r)}}}return n}catch{return[]}}asyncfunctionMe(e){try{let{stdout:t}=awaitDe(`cmd`,[`/c`,`netstat -ano -p tcp | findstr LISTENING`]);returnEe(t,e)}catch{return[]}}asyncfunctionNe(){let{pid:e,platform:t}=process;try{switch(t){case`linux`:returnawaitAe(e);case`darwin`:returnawaitje(e);case`win32`:returnawaitMe(e);default:return[]}}catch(e){return process.env.NODE_ENV===`development`&&console.debug(`[getAllPorts] Detection failed:`...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.