registry / foremanjs / 1.1.0

foremanjs@1.1.0

Foreman — the review inbox for your AI workforce. Risk-ranked review cards for every agent session, with signed MCP receipts proving what tools actually did.

Static Scan Results

scanned 23h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 46 file(s), 231 KB of source, external domains: 127.0.0.1, api.githubcopilot.com, docs.stripe.com, github.com, img.shields.io, mcp.atlassian.com, raw.githubusercontent.com, xbarapp.com

Source & flagged code

5 flagged

README.mdView file

•- **Rug-pull detection** — tool definitions are fingerprinted on first use. When *"adds two numbers"* becomes *"adds two numbers. IGNORE PREVIOUS INSTRUCTIONS…"*, a finding lands in your inbox. Re-accept intentional updates with `foreman trust <server>`.

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

dist/test/smoke.test.jsView file

Lines 907-947javascript

907 assert.equal(listed.result.content[0].text, "ok", "call forwarded + response relayed");

908 const bad = await fetch(`http://127.0.0.1:${port}/nope`, { method: "POST", body: "{}" }).then((r) => r.status);

909 assert.equal(bad, 404, "unknown server 404s");

910 await new Promise((r) => setTimeout(r, 120));

911 const webCalls = readEvents().filter((e) => e.kind === "mcp_call" && e.data.server === "trackt");

912 assert.ok(webCalls.length >= 1, "receipt journaled for the tracked call");

913 assert.ok(webCalls.every((e) => e.data.surface === "web"), "tracked calls tagged web");

914 server.close();

915 upstream.close();

916 removeServer("trackt");

917});

918test("preview: readable args, secrets redacted", async () => {

919 const { previewCall, redactValue } = await import("../preview.js");

920 // the target/site is surfaced and readable

921 assert.equal(previewCall("tools/call", { name: "fetch_url", arguments: { url: "https://example.com/api" } }), "url=https://example.com/api");

922 // priority ordering puts url/query first

923 assert.ok(previewCall("tools/call", { name: "x", arguments: { verbose: true, query: "foreman" } }).startsWith("query=foreman"));

924 // secret-NAMED args are masked

925 assert.ok(previewCall("tools/call", { name: "x", arguments: { token: "hunter2xyz" } }).includes("••••"));

926 // secret-SHAPED values are masked even under an innocent key

927 assert.equal(redactValue("data", "ghp_ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"), "••••redacted••••");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/test/smoke.test.jsView on unpkg · L927

Critical

Secret Pattern

GitHub personal access token in dist/test/smoke.test.js

dist/test/smoke.test.jsView on unpkg · L927

928 // ordinary values pass through

929 assert.equal(redactValue("repo", "octocat/hello"), "octocat/hello");

930 // nothing meaningful → undefined

931 assert.equal(previewCall("tools/list", {}), undefined);

932});

933test("wire: wraps stdio MCP servers, skips remote, and unwires cleanly", async () => {

934 const os = await import("node:os");

935 const fsx = await import("node:fs");

936 const px = await import("node:path");

937 const { wireConfig, unwireConfig } = await import("../wire.js");

938 const dir = fsx.mkdtempSync(px.join(os.tmpdir(), "fm-wire-"));

939 const cfg = px.join(dir, "claude_desktop_config.json");

940 const original = {

941 mcpServers: {

942 github: { command: "npx", args: ["-y", "@modelcontextprotocol/server-github"], env: { GITHUB_TOKEN: "x" } },

943 remote: { url: "https://mcp.example.com/sse" },

944 },

945 };

946 fsx.writeFileSync(cfg, JSON.stringify(original, null, 2));

947 const r = wireConfig(cfg, "C:/node.exe", "C:/foreman/cli.js");

dist/wrapped.jsView file

Lines 1-22javascript

1import fs from "node:fs";

2import path from "node:path";

3import { execFileSync, spawn } from "node:child_process";

4import { buildCards } from "./cards.js";

dist/cli.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = foremanjs@1.0.1 matchedIdentity = npm:Zm9yZW1hbmpz:1.0.1 similarity = 0.686 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/cli.jsView on unpkg

Source & flagged code

5 flagged · loading source

README.mdView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code