registry / gm-plugkit / 2.0.1707

gm-plugkit@2.0.1707

⚠ Under review

Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 263 KB of source, external domains: 127.0.0.1, github.com, registry.npmjs.org

Source & flagged code

10 flagged

supervisor.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

6const os = require('os');

7const crypto = require('crypto');

8const { spawn, spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

10function wrapperSha12OnDisk() {

11 try {

12 const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js');

13 const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js');

14 const wp = fs.existsSync(primary) ? primary : fallback;

15 return crypto.createHash('sha256').update(fs.readFileSync(wp)).digest('hex').slice(0, 12);

16 } catch (_) { return null; }

17}

19const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();

20const spoolDir = path.join(projectDir, '.gm', 'exec-spool');

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

21fs.mkdirSync(spoolDir, { recursive: true });

23const STATUS_PATH = path.join(spoolDir, '.status.json');

24const SHUTDOWN_REASON_PATH = path.join(spoolDir, '.shutdown-reason.json');

25const SUPERVISOR_PATH = path.join(spoolDir, '.supervisor.json');

26const SUPERVISOR_PID_PATH = path.join(spoolDir, '.supervisor.pid');

27const LOG_PATH = path.join(spoolDir, '.watcher.log');

plugkit-wasm-wrapper.jsView file

Lines 1-24javascript

1import fs from 'fs';

2import path from 'path';

3import os from 'os';

4import crypto from 'crypto';

5import https from 'https';

6import

lang-host-runner.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2'use strict';

3const fs = require('fs');

4const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lang-host-runner.jsView on unpkg · L2

Source & flagged code

10 flagged · loading source

supervisor.jsView file

7const crypto = require('crypto'); L8: const { spawn, spawnSync } = require('child_process'); L9:

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

7Cross-file remote execution chain: supervisor.js spawns plugkit-wasm-wrapper.js; helper contains network access plus dynamic code execution. L7: const crypto = require('crypto'); L8: const { spawn, spawnSync } = require('child_process'); L9: ... L11: try { L12: const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js'); L13: const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js'); ... L18: L19: const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd(); L20: const spoolDir = path.join(projectDir, '.gm', 'exec-spool'); ... L85: let supTs = 0; L86: try { supTs = (JSON.parse(fs.readFileSync(SUPERVISOR_PATH, 'utf-8')).ts) || 0; } catch (_) {} L87: const spool = readStatus();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

plugkit-wasm-wrapper.jsView file

1027function isPortAliveSync(port) { L1028: const r = spawnSync(process.execPath, ['-e', ` L1029: const net = require('net'); L1030: const s = net.connect({ port: ${port}, host: '127.0.0.1' }); ... L1042: function playwriterHomeFor(cwd, claudeSessionId) { L1043: if (process.env.PLAYWRITER_HOME) return process.env.PLAYWRITER_HOME; L1044: if (!cwd) return path.join(GM_TOOLS_ROOT, `pw-sock-${sessionProfileSlug(claudeSessionId)}`);

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

plugkit-wasm-wrapper.jsView on unpkg · L1027

1004Trigger-reachable chain: manifest.bin -> plugkit-wasm-wrapper.js L1004: function isPortReachableSync(host, port, timeoutMs) { L1005: const r = spawnSync(process.execPath, ['-e', ` L1006: const net = require('net'); L1007: const s = net.connect({ port: ${port}, host: ${JSON.stringify(host)} }); ... L1019: const srv = net.createServer(); L1020: srv.listen(0, '127.0.0.1', () => { const p = srv.address().port; srv.close(() => { process.stdout.write(String(p)); }); }); L1021: srv.on('error', e => { process.stderr.write(e.message); process.exit(1); });

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

plugkit-wasm-wrapper.jsView on unpkg · L1004

715function findBrowserRunner() { L716: const npmR = spawnSync('npm', ['root', '-g'], { encoding: 'utf-8', shell: true }); L717: if (npmR.status === 0 && npm[redacted]()) {

High

Shell

Package source references shell execution.

plugkit-wasm-wrapper.jsView on unpkg · L715

707if (!_aggregateCpuProfileFn) { L708: _aggregateCpuProfileFn = new Function(AGGREGATE_CPU_PROFILE_SRC + '\nreturn aggregateCpuProfile;')(); L709: }

High

Eval

Package source references dynamic code evaluation.

plugkit-wasm-wrapper.jsView on unpkg · L707

1004function isPortReachableSync(host, port, timeoutMs) { L1005: const r = spawnSync(process.execPath, ['-e', ` L1006: const net = require('net'); L1007: const s = net.connect({ port: ${port}, host: ${JSON.stringify(host)} }); ... L1019: const srv = net.createServer(); L1020: srv.listen(0, '127.0.0.1', () => { const p = srv.address().port; srv.close(() => { process.stdout.write(String(p)); }); }); L1021: srv.on('error', e => { process.stderr.write(e.message); process.exit(1); });

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

plugkit-wasm-wrapper.jsView on unpkg · L1004

1259logEvent('plugkit', 'browser.chromium-installing', {}); L1260: spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['--yes', 'playwright', 'install', 'chromium'], { L1261: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

plugkit-wasm-wrapper.jsView on unpkg · L1259

4import crypto from 'crypto'; L5: import https from 'https'; L6: import http from 'http'; L7: import { watch } from 'fs'; L8: import * as _childProcess from 'child_process'; L9: import { spawn as _rawSpawn, spawnSync as _rawSpawnSync } from 'child_process'; ... L27: const __filename = fileURLToPath(import.meta.url); L28: const __dirname = path.dirname(__filename); L29: ... L40: L41: const GM_LOG_ROOT = process.env.GM_LOG_DIR || path.join(os.homedir(), '.claude', 'gm-log'); L42: const ORCHESTRATOR_VERBS = new Set(['instruction', 'transition', 'phase-status', 'prd-add', 'prd-resolve', 'prd-list', 'mutable-add', 'mutable-resolve', 'mutable-list', 'memorize-f...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

plugkit-wasm-wrapper.jsView on unpkg · L4

lang-host-runner.jsView file

2'use strict'; L3: const fs = require('fs'); L4: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lang-host-runner.jsView on unpkg · L2

Findings

2 Critical6 High4 Medium4 Low

CriticalSame File Env Network Executionplugkit-wasm-wrapper.js

CriticalTrigger Reachable Dangerous Capabilityplugkit-wasm-wrapper.js

HighChild Processsupervisor.js

HighShellplugkit-wasm-wrapper.js

HighEvalplugkit-wasm-wrapper.js

HighCommand Output Exfiltrationplugkit-wasm-wrapper.js

HighCross File Remote Execution Contextsupervisor.js

HighRuntime Package Installplugkit-wasm-wrapper.js

MediumDynamic Requirelang-host-runner.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowWeak Cryptoplugkit-wasm-wrapper.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

supervisor.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

6const os = require('os');

7const crypto = require('crypto');

8const { spawn, spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

10function wrapperSha12OnDisk() {

11 try {

12 const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js');

13 const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js');

14 const wp = fs.existsSync(primary) ? primary : fallback;

15 return crypto.createHash('sha256').update(fs.readFileSync(wp)).digest('hex').slice(0, 12);

16 } catch (_) { return null; }

17}

19const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();

20const spoolDir = path.join(projectDir, '.gm', 'exec-spool');

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

21fs.mkdirSync(spoolDir, { recursive: true });

23const STATUS_PATH = path.join(spoolDir, '.status.json');

24const SHUTDOWN_REASON_PATH = path.join(spoolDir, '.shutdown-reason.json');

25const SUPERVISOR_PATH = path.join(spoolDir, '.supervisor.json');

26const SUPERVISOR_PID_PATH = path.join(spoolDir, '.supervisor.pid');

27const LOG_PATH = path.join(spoolDir, '.watcher.log');

plugkit-wasm-wrapper.jsView file

Lines 1-24javascript

1import fs from 'fs';

2import path from 'path';

3import os from 'os';

4import crypto from 'crypto';

5import https from 'https';

6import

lang-host-runner.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2'use strict';

3const fs = require('fs');

4const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lang-host-runner.jsView on unpkg · L2

Lines 687-735javascript

687 },

688 culprits,

689 };

690}`;

691

692let execProfileSeq = 0;

693function sweepStaleProfileTmp() {

694 try {

695 const dir = os.tmpdir();

696 const cutoff = Date.now() - 3600000;

697 for (const name of fs.readdirSync(dir)) {

698 if (!/^gm-prof-\d+-\d+\.js$/.test(name)) continue;

699 const fp = path.join(dir, name);

700 try { if (fs.statSync(fp).mtimeMs < cutoff) fs.unlinkSync(fp); } catch (_) {}

701 }

702 } catch (_) {}

703}

704try { sweepStaleProfileTmp(); } catch (_) {}

705let _aggregateCpuProfileFn = null;

706function aggregateCpuProfile(profile, topN) {

707 if (!_aggregateCpuProfileFn) {

708 _aggregateCpuProfileFn = new Function(AGGREGATE_CPU_PROFILE_SRC + '\nreturn aggregateCpuProfile;')();

709 }

High

Eval

Package source references dynamic code evaluation.

plugkit-wasm-wrapper.jsView on unpkg · L707

710 return _aggregateCpuProfileFn(profile, topN);

711}

712

713const BROWSER_RUNNER_BIN = process.env.GM_BROWSER_RUNNER_BIN || 'playwriter';

714

715function findBrowserRunner() {

716 const npmR = spawnSync('npm', ['root', '-g'], { encoding: 'utf-8', shell: true });

717 if (npmR.status === 0 && npmR.stdout.trim()) {

High

Shell

Package source references shell execution.

plugkit-wasm-wrapper.jsView on unpkg · L715

718 const root = npmR.stdout.trim().split(/\r?\n/).pop();

719 const binJs = path.join(root, BROWSER_RUNNER_BIN, 'bin.js');

720 if (fs.existsSync(binJs)) return { cmd: process.execPath, baseArgs: [binJs], shell: false };

721 }

722 const whichCmd = process.platform === 'win32' ? 'where' : 'which';

723 const r = spawnSync(whichCmd, [BROWSER_RUNNER_BIN], { encoding: 'utf-8', shell: true });

724 if (r.status === 0 && r.stdout.trim()) {

725 const candidates = r.stdout.split(/\r?\n/).map(l => l.trim()).filter(Boolean);

726 const cmd = candidates.find(c => c.toLowerCase().endsWith('.cmd')) || candidates.find(c => !c.toLowerCase().endsWith('.ps1')) || candidates[0];

727 if (cmd) return { cmd, baseArgs: [], shell: process.platform === 'win32' };

728 }

729 const bunR = spawnSync(whichCmd, ['bun'], { encoding: 'utf-8', shell: true });

730 if (bunR.status === 0 && bunR.stdout.trim()) {

731 return { cmd: 'bun', baseArgs: ['x', `${BROWSER_RUNNER_BIN}@latest`], shell: true };

732 }

733 const npxR = spawnSync(whichCmd, ['npx'], { encoding: 'utf-8', shell: true });

734 if (npxR.status === 0 && npxR.stdout.trim()) {

735 return { cmd: 'npx', baseArgs: ['-y', BROWSER_RUNNER_BIN], shell: true };

Lines 984-1047javascript

984

985function resolveWindowsExeLocal(cmd) {

986 if (process.platform !== 'win32') return cmd;

987 try {

988 const out = spawnSync('where', [cmd], {

989 encoding: 'utf-8',

990 stdio: ['ignore', 'pipe', 'ignore'],

991 windowsHide: true,

992 timeout: 800,

993 });

994 if (out.status !== 0) return cmd;

995 const lines = (out.stdout || '').split(/\r?\n/).map(l => l.trim()).filter(Boolean);

996 const exe = lines.find(l => /\.exe$/i.test(l));

997 const shim = lines.find(l => /\.(cmd|bat)$/i.test(l));

998 return exe || shim || cmd;

999 } catch {

1000 return cmd;

1001 }

1002}

1003

1004function isPortReachableSync(host, port, timeoutMs) {

1005 const r = spawnSync(process.execPath, ['-e', `

1006 const net = require('net');

1007 const s = net.connect({ port: ${port}, host: ${JSON.stringify(host)} });

1008 let done = false;

1009 s.on('connect', () => { done = true; s.destroy(); process.exit(0); });

1010 s.on('error', () => { if (!done) process.exit(1); });

1011 setTimeout(() => { if (!done) { s.destroy(); process.exit(1); } }, ${timeoutMs || 800});

1012 `], { timeout: (timeoutMs || 800) + 2000, windowsHide: true });

1013 return r.status === 0;

1014}

1015

1016function findFreePortSync() {

1017 const r = spawnSync(process.execPath, ['-e', `

1018 const net = require('net');

1019 const srv = net.createServer();

1020 srv.listen(0, '127.0.0.1', () => { const p = srv.address().port; srv.close(() => { process.stdout.write(String(p)); }); });

1021 srv.on('error', e => { process.stderr.write(e.message); process.exit(1); });

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

plugkit-wasm-wrapper.jsView on unpkg · L1004

1022 `], { encoding: 'utf-8', timeout: 5000 });

1023 if (r.status !== 0) throw new Error('could not allocate free port');

1024 return parseInt(r.stdout.trim(), 10);

1025}

1026

1027function isPortAliveSync(port) {

1028 const r = spawnSync(process.execPath, ['-e', `

1029 const net = require('net');

1030 const s = net.connect({ port: ${port}, host: '127.0.0.1' });

1031 s.on('connect', () => { s.destroy(); process.exit(0); });

1032 s.on('error', () => process.exit(1));

1033 setTimeout(() => process.exit(1), 800);

1034 `], { timeout: 2000 });

1035 return r.status === 0;

1036}

1037

1038function sleepSync(ms) {

1039 Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, Math.max(0, ms | 0));

1040}

1041

1042function playwriterHomeFor(cwd, claudeSessionId) {

1043 if (process.env.PLAYWRITER_HOME) return process.env.PLAYWRITER_HOME;

1044 if (!cwd) return path.join(GM_TOOLS_ROOT, `pw-sock-${sessionProfileSlug(claudeSessionId)}`);

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

plugkit-wasm-wrapper.jsView on unpkg · L1027

1045 try { ensureGitignored(cwd, '.gm/pw-sock-*/'); } catch (_) {}

1046 return path.join(cwd, '.gm', `pw-sock-${sessionProfileSlug(claudeSessionId)}`);

1047}