Filesystem-first framework for durable backend AI agents that run anywhere.
AI Security Review
scanned 3mo ago · by lpm-firewall-ai
Source inspection found a powerful, package-aligned agent shell/network capability but no concrete malicious chain. Downgrade to warn for dangerous dual-use agent execution rather than block publication.
A consumer configures and runs the just-bash sandbox or explicitly invokes `eve init` / `eve extension init`.
Impact
A compromised or overly-permissioned agent configuration could execute commands, modify sandbox files, and reach network services.
Mechanism
User-configured agent shell execution with sandbox filesystem and network access.
AI rationale
Source inspection found a powerful, package-aligned agent shell/network capability but no concrete malicious chain. Downgrade to warn for dangerous dual-use agent execution rather than block publication.
1import{a as e,i as t,r as n,t as r}from"../../_chunks/workflow/chunk-BHKSVoKr.js";import{a as i,c as a,h as o,l as s,m as c,n as l,o as u,p as d}from"../../_chunks/workflow/dist-Ct...
L2: `).map(e=>{let n=e.match(/^\s*at\s+(?:(.+?)\s+\()?(.+?):(\d+):(\d+)\)?$/);if(!n)return e;let[,i,a,o,s]=n;if(!a.includes(t))return e;let c=parseInt(o,10),l=parseInt(s,10),u=Ti(r,{li...
Medium
Unsafe Vm Context
Package source executes code through a VM context API.
1import{a as e,i as t,t as n}from"../../_chunks/workflow/chunk-BHKSVoKr.js";import{i as r,n as i,r as a,t as o}from"../../_chunks/workflow/dist-CttsoN4D.js";import{E as s,d as c,g a...
L2: `);for(let e of r){let r=e.trim().split(/\s+/);if(r.length<5||r[0]?.toUpperCase()!==`TCP`)continue;let[,i,,a,o]=r;if(a?.toUpperCase()!==`LISTENING`||o!==t.toString())continue;let s...
L3: `).slice(1);for(let e of t){if(!e.trim())continue;let t=e.trim().split(/\s+/);if(t.length<10)continue;let n=t[1],i=t[3],o=t[9];if(!n||i!==`0A`||!o||!r.has(o))continue;let s=n.index...
L4: `);for(let e of r)if(e.includes(`LISTEN`)){let t=e.trim().split(/\s+/)[8];if(t){let e=t.lastIndexOf(`:`);if(e!==-1){let r=Oe(t.slice(e+1));r!==void 0&&n.push(r)}}}return n}catch{re...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
1import{AISDKError as e,APICallError as t,EmptyResponseBodyError as n,InvalidArgumentError as r,InvalidResponseDataError as i,JSONParseError as a,LoadAPIKeyError as o,NoSuchProvider...
L2: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L3: `))}};const Kt={major:4,minor:4,patch:3},C=p(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=Kt;let r=[...e._zod.def.checks??[]];e._zod.traits...
L4: if (${n}.issues.length) {
...
L72: ${i}`,l++;return}if(jc(e,t,r)){u=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+...
L73: ${t}`,l+
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
26`,o?1+l:l),o=!0,s=!0,l=0,r=e.position;!x(h)&&h!==0;)h=e.input.charCodeAt(++e.position);I(e,r,e.position,!1)}return!0}function J(e,t){var n,r=e.tag,i=e.anchor,a=[],o,s=!1,c;for(e.anchor!==null&&(e.anchorMap[e.anchor]=a),c=e.input.charCodeAt(e.position);c!==0&&!(c!==45||(o=e.input.charCodeAt(e.position+1),!C(o)));){if(s=!0,e.position++,B(e,!0,-1)&&e.lineIndent<=t){a.push(null),c=e.input.charCodeAt(e.position);continue}if(n=e.line,Z(e,t,u,!1,!0),a.push(e.result),B(e,!0,-1),c=e.input.charCodeAt(e.position),(e.line===n||e.lineIndent>t)&&c!==0)N(e,`bad indentation of a sequence entry`);else if(e.lin ...
1import{a as e,i as t,t as n}from"../../_chunks/workflow/chunk-BHKSVoKr.js";import{i as r,n as i,r as a,t as o}from"../../_chunks/workflow/dist-CttsoN4D.js";import{E as
1import{AISDKError as e,APICallError as t,EmptyResponseBodyError as n,InvalidArgumentError as r,InvalidResponseDataError as i,JSONParseError as a,LoadAPIKeyError as o,NoSuchProvider...
L2: `).filter(e=>e),n=Math.min(...t.map(e=>e.length-e.trimStart().length)),r=t.map(e=>e.slice(n)).map(e=>` `.repeat(this.indent*2)+e);for(let e of r)this.content.push(e)}compile(){let ...
L3: `))}};const Kt={major:4,minor:4,patch:3},C=p(`$ZodType`,(e,t)=>{var n;e??={},e._zod.def=t,e._zod.bag=e._zod.bag||{},e._zod.version=Kt;let r=[...e._zod.def.checks??[]];e._zod.traits...
L4: if (${n}.issues.length) {
...
L72: ${i}`,l++;return}if(jc(e,t,r)){u=e.slice(e.charCodeAt(t+6)===32?t+7:t+6,n)||void 0;return}if(r===105&&e.charCodeAt(t+1)===100&&e.charCodeAt(t+2)===58){let r=e.slice(e.charCodeAt(t+...
L73: ${t}`,l+
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
42`:``}function pe(e,t){return fe(e,n.extend({schema:a},t))}t.exports.dump=fe,t.exports.safeDump=pe})),require_js_yaml$1=__commonJSMin(((e,t)=>{var n=require_loader(),r=require_dumper();function i(e){return function(){throw Error(`Function `+e+` is deprecated and cannot be used.`)}}t.exports.Type=require_type(),t.exports.Schema=require_schema(),t.exports.FAILSAFE_SCHEMA=require_failsafe(),t.exports.JSON_SCHEMA=require_json(),t.exports.CORE_SCHEMA=require_core(),t.exports.DEFAULT_SAFE_SCHEMA=require_default_safe(),t.exports.DEFAULT_FULL_SCHEMA=require_default_full(),t.exports.load=n.load,t.export ...
43return `+str.trim()+`;
44}());`),eval(str)||{}}catch(e){if(wrap!==!1&&/(unexpected|identifier)/i.test(e.message))returnparse(str,options,!1);throwSyntaxError(e)}},stringify:function(){throwError(`stringifying JavaScript is not supported`)}}})),require_strip_bom_string=__commonJSMin(((e,t)=>{t.exports=function(e){returntypeof e==`string`&&e.charAt(0)===``?e.slice(1):e}})),require_utils=__commonJSMin((e=>{let t=require_strip_bom_string(),n=require_kind_of();e.define=function(e,t,n){Reflect.defineProperty(e,t,{enumerable:!1,configurable:!0,writable:!0,value:n})},e.isBuffer=function(e){returnn(e)===`buffer`},e.isObj ...
45`?e:e+`
Low
Eval
Package source references a known benign dynamic code generation pattern.
2`))}async function terminate(e){e.exitCode!==null||e.killed||(e.kill(`SIGTERM`),await Promise.race([once(e,`exit`),setTimeout(2e4).then(()=>`timeout`)])===`timeout`&&e.exitCode===null&&(e.kill(`SIGKILL`),await once(e,`exit`)),e.stdout?.destroy(),e.stderr?.destroy())}function once(e,t){return new Promise(n=>{e.once(t,()=>n())})}async function startProductionServer(e,n={}){let o=resolve(e),s=resolveOutputServerEntry(o);if(!existsSync(s))throw Error(`Missing eve build output at ${s}. Run "eve build" before "eve start".`);loadDevelopmentEnvironmentFiles(o),await prewarmBuiltAppSandboxes({appRoot:o ...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/src/internal/nitro/host/start-production-server.jsView on unpkg · L1
3`)))})});h.catch(()=>void0);try{return{asyncclose(){f=!0,awaitterminate(m)},url:awaitwaitForReady({child:m,getStartError:()=>p,getOutput:()=>d,knownUrl:u}),asyncwait(){await h}}}catch(e){throw f=!0,awaitterminate(m),isRecord(e)&&e.name===`AbortError`?Error(`Timed out waiting for built eve server to respond.`,{cause:e}):e}}export{startProductionServer};
Long lines were clipped for display.
s,d
as
c,g
as
l,o
as
u,r
as
d,u
as
f,w
as
p}
from
"../../_chunks/workflow/dist-BYo8Gno2.js"
;
import
{B
as
m,D
as
h,G
as
g,H
as
_,J
as
v,L
as
y,M
as
b,N
as
x,O
as
ee,R
as
te,U
as
S,V
as
ne,Y
as
re,Z
as
C,_
as
w,at
as
T,c
as
ie,et
as
ae,f
as
oe,j
as
E,k
as
se,m
as
ce,n
as
le,o
as
D,r
as
ue,rt
as
O,s
as
de,st
as
k,u
as
A,y
as
j,z
as
M}
from
"../../_chunks/workflow/dist-CSfKNxQW.js"
;
import
{t
as
N}
from
"../../_chunks/workflow/undici-fb54XL8 ..
.
2`);for(let e of r){let r=e.trim().split(/\s+/);if(r.length<5||r[0]?.toUpperCase()!==`TCP`)continue;let[,i,,a,o]=r;if(a?.toUpperCase()!==`LISTENING`||o!==t.toString())continue;let s=i.lastIndexOf(`:`);if(s===-1)continue;let c=Te(i.slice(s+1));c!==void 0&&n.push(c)}return n}const De=fe(Se);function Oe(e,t=10){let n=parseInt(e,t);if(!Number.isNaN(n)&&n>=0&&n<=65535)return n}const ke=((e,t)=>e.join(t))([``,`proc`],`/`);async function Ae(e){let t=[`${ke}/net/tcp`,`${ke}/net/tcp6`],n=[],r=new Set,i=`${ke}/${e}/fd`;try{let e=(await _e(i)).sort((e,t)=>Number.parseInt(e,10)-Number.parseInt(t,10)),t=awa ...
3`).slice(1);for(let e of t){if(!e.trim())continue;let t=e.trim().split(/\s+/);if(t.length<10)continue;let n=t[1],i=t[3],o=t[9];if(!n||i!==`0A`||!o||!r.has(o))continue;let s=n.indexOf(`:`);if(s===-1)continue;let c=n.slice(s+1);if(!c)continue;let l=Oe(c,16);l!==void0&&a.set(o,l)}}catch{}let o=[];for(let e of n){let t=a.get(e);t!==void0&&o.push(t)}return o}asyncfunctionje(e){try{let{stdout:t}=awaitDe(`lsof`,[`-a`,`-i`,`-P`,`-n`,`-p`,e.toString()]),n=[],r=t.split(`
4`);for(let e of r)if(e.includes(`LISTEN`)){let t=e.trim().split(/\s+/)[8];if(t){let e=t.lastIndexOf(`:`);if(e!==-1){let r=Oe(t.slice(e+1));r!==void0&&n.push(r)}}}return n}catch{return[]}}asyncfunctionMe(e){try{let{stdout:t}=awaitDe(`cmd`,[`/c`,`netstat -ano -p tcp | findstr LISTENING`]);returnEe(t,e)}catch{return[]}}asyncfunctionNe(){let{pid:e,platform:t}=process;try{switch(t){case`linux`:returnawaitAe(e);case`darwin`:returnawaitje(e);case`win32`:returnawaitMe(e);default:return[]}}catch(e){return process.env.NODE_ENV===`development`&&console.debug(`[getAllPorts] Detection failed:`...
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.