registry / fullstackgtm / 0.44.0

fullstackgtm@0.44.0

Open-source agentic GTM ops framework: canonical GTM data model, pluggable deterministic audits, reviewable dry-run patch plans, approval-gated write-back with conflict detection, and cross-system entity resolution. HubSpot, Salesforce, and Stripe connect

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 130 file(s), 2.23 MB of source, external domains: api.anthropic.com, api.apollo.io, api.ashbyhq.com, api.explorium.ai, api.heyreach.io, api.hubapi.com, api.lever.co, api.openai.com, api.pipe0.com, api.stripe.com, api.theirstack.com, app.hubspot.com, boards-api.greenhouse.io, example.com, github.com, gtm.example.com, gtm.yourco.com, login.salesforce.com, schemas.xmlsoap.org, serpapi.com, www.google.com, www.linkedin.com, yourco.my.salesforce.com, yourorg.my.salesforce.com

Source & flagged code

4 flagged

dist/config.jsView file

Lines 39-79javascript

39export function mergePolicy(base, config) {

40 if (!config?.policy)

41 return base;

42 const merged = { ...base };

43 for (const [key, value] of Object.entries(config.policy)) {

44 if (value !== undefined) {

45 merged[key] = value;

46 }

47 }

48 return merged;

49}

50/**

51 * Build the effective rule set: built-ins plus rule-package exports, then

52 * `enabled` (allow-list) and `disabled` filters.

53 */

54export async function resolveConfiguredRules(loaded, baseRules = builtinAuditRules) {

55 let rules = [...baseRules];

56 for (const specifier of loaded?.config.rulePackages ?? []) {

57 const resolvedSpecifier = specifier.startsWith(".") || isAbsolute(specifier)

58 ? pathToFileURL(resolve(dirname(loaded.path), specifier)).href

59 : specifier;

60 const rulePackage = await import(__rewriteRelativeImportExtension(resolvedSpecifier));

61 const imported = rulePackage.rules ?? rulePackage.default?.rules;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/config.jsView on unpkg · L59

62 if (!Array.isArray(imported)) {

63 throw new Error(`Rule package ${specifier} must export \`rules: GtmAuditRule[]\`.`);

64 }

65 for (const rule of imported) {

66 if (!rule?.id || typeof rule.evaluate !== "function") {

67 throw new Error(`Rule package ${specifier} exported an invalid rule.`);

68 }

69 rules.push(rule);

70 }

71 }

72 const enabled = loaded?.config.rules?.enabled;

73 if (enabled?.length) {

74 const known = new Map(rules.map((rule) => [rule.id, rule]));

75 rules = enabled.map((id) => {

76 const rule = known.get(id);

77 if (!rule) {

78 throw new Error(`Config enables unknown rule: ${id}. Known rules: ${Array.from(known.keys()).join(", ")}`);

79 }

dist/schedule.jsView file

Lines 1-21javascript

1import { spawnSync } from "node:child_process";

2import { mkdirSync, readdirSync, readFileSync } from "node:fs";

3import { join } from "node:path";

4import { credentialsDir, ensureSecureHomeDir, writeSecureFile } from "./credentials.js";

5// Mirrors stableHash in rules.ts (FNV-1a); duplicated to keep schedule.ts

6// importable without pulling the audit engine (the market/enrich precedent).

dist/cli.jsView file

Lines 30-70javascript

30import { suggestMarketConfig } from "./marketTaxonomy.js";

31import { buildWorksheet, classifyMarket } from "./marketClassify.js";

32import { marketMapToHtml, marketMapToMarkdown } from "./marketReport.js";

33import { DEFAULT_RUBRIC, classifyCallLlm, detectProviderFromKey, extractInsightsLlm, parseRubric, resolveLlmCredential, scoreCallLlm, validateLlmKey, } from "./llm.js";

34import { buildAcquirePlan, buildEnrichPlan, createFileEnrichRunStore, DEFAULT_STALE_DAYS, ENRICH_CONFIG_FILE_NAME, builtinAcquirePreset, builtinEnrichPreset, enrichRunId, inferIngestObjectType, latestStamps, loadEnrichConfig, parseCsv, resolveCrmField, selectStaleWork, stagedSourceRecords, staleDaysFor, }

Source & flagged code

4 flagged · loading source

dist/config.jsView file

59: specifier; L60: const rulePackage = await import(__rewriteRelativeImportExtension(resolvedSpecifier)); L61: const imported = rulePackage.rules ?? rulePackage.default?.rules;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/config.jsView on unpkg · L59

dist/schedule.jsView file

1import { spawnSync } from "node:child_process"; L2: import { mkdirSync, readdirSync, readFileSync } from "node:fs"; ... L9: for (let i = 0; i < value.length; i += 1) { L10: hash ^= value.charCodeAt(i); L11: hash = Math.imul(hash, 0x01000193); ... L109: * A schedule label is free text the operator chooses, but it is later L110: * interpolated into a crontab comment line by `renderManagedBlock`. A newline L111: * (or carriage return) would break out of the comment and inject an arbitrary ... L406: else L407: ensureSecureHomeDir(); L408: writeSecureFile(path(), `${JSON.stringify(file, null, 2)}\n`); ... L501: // "no crontab for <user>" exits 1: an empty crontab, not a failure.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/schedule.jsView on unpkg · L1

dist/cli.jsView file

50import { apolloPullKeysForAppend, apolloPullKeysForRefresh, createApolloClient, pullApolloRecords, } from "./enrichApollo.js"; L51: import { computeMissedFirings, createFileScheduleRunStore, createFileScheduleStore, nextCronFiring, parseCron, renderManagedBlock, replaceManagedBlock, assertSingleLineLabel, hasCo... L52: import { resolveRecord } from "./resolve.js"; ... L238: 3. stored provider login fullstackgtm login <provider>; kept in ~/.fullstackgtm L239: (hubspot: private app token or loopback OAuth; L240: salesforce: device flow — code on any device, no ... L273: --max-examples <n> Example records listed per rule (default 10) L274: --out <path> Write the report to a file instead of stdout L275: ... L631: if (tokenEnv) { L632: const token = process.env[tokenEnv]; L633: if (!token)

High

Host Fingerprint Exfiltration

Source collects local host identity data and sends it to an external endpoint.

dist/cli.jsView on unpkg · L50

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L50

Findings

2 High5 Medium5 Low

HighHost Fingerprint Exfiltrationdist/cli.js

HighSandbox Evasion Gated Capabilitydist/cli.js

MediumDynamic Requiredist/config.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/schedule.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/config.jsView file

Lines 39-79javascript

39export function mergePolicy(base, config) {

40 if (!config?.policy)

41 return base;

42 const merged = { ...base };

43 for (const [key, value] of Object.entries(config.policy)) {

44 if (value !== undefined) {

45 merged[key] = value;

46 }

47 }

48 return merged;

49}

50/**

51 * Build the effective rule set: built-ins plus rule-package exports, then

52 * `enabled` (allow-list) and `disabled` filters.

53 */

54export async function resolveConfiguredRules(loaded, baseRules = builtinAuditRules) {

55 let rules = [...baseRules];

56 for (const specifier of loaded?.config.rulePackages ?? []) {

57 const resolvedSpecifier = specifier.startsWith(".") || isAbsolute(specifier)

58 ? pathToFileURL(resolve(dirname(loaded.path), specifier)).href

59 : specifier;

60 const rulePackage = await import(__rewriteRelativeImportExtension(resolvedSpecifier));

61 const imported = rulePackage.rules ?? rulePackage.default?.rules;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/config.jsView on unpkg · L59

62 if (!Array.isArray(imported)) {

63 throw new Error(`Rule package ${specifier} must export \`rules: GtmAuditRule[]\`.`);

64 }

65 for (const rule of imported) {

66 if (!rule?.id || typeof rule.evaluate !== "function") {

67 throw new Error(`Rule package ${specifier} exported an invalid rule.`);

68 }

69 rules.push(rule);

70 }

71 }

72 const enabled = loaded?.config.rules?.enabled;

73 if (enabled?.length) {

74 const known = new Map(rules.map((rule) => [rule.id, rule]));

75 rules = enabled.map((id) => {

76 const rule = known.get(id);

77 if (!rule) {

78 throw new Error(`Config enables unknown rule: ${id}. Known rules: ${Array.from(known.keys()).join(", ")}`);

79 }

dist/schedule.jsView file

Lines 1-21javascript

1import { spawnSync } from "node:child_process";

2import { mkdirSync, readdirSync, readFileSync } from "node:fs";

3import { join } from "node:path";

4import { credentialsDir, ensureSecureHomeDir, writeSecureFile } from "./credentials.js";

5// Mirrors stableHash in rules.ts (FNV-1a); duplicated to keep schedule.ts

6// importable without pulling the audit engine (the market/enrich precedent).

dist/cli.jsView file

Lines 30-70javascript

30import { suggestMarketConfig } from "./marketTaxonomy.js";

31import { buildWorksheet, classifyMarket } from "./marketClassify.js";

32import { marketMapToHtml, marketMapToMarkdown } from "./marketReport.js";

33import { DEFAULT_RUBRIC, classifyCallLlm, detectProviderFromKey, extractInsightsLlm, parseRubric, resolveLlmCredential, scoreCallLlm, validateLlmKey, } from "./llm.js";