registry / gm-plugkit / 2.0.1742

gm-plugkit@2.0.1742

⚠ Under review

Bootstrap and daemon-spawn tool for gm plugkit binary. Downloads the correct platform binary, verifies SHA256, and starts the spool watcher daemon. Includes plugkit-wasm-wrapper for WASM-based spool watching.

Static Scan Results

scanned 12h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 265 KB of source, external domains: 127.0.0.1, github.com, registry.npmjs.org

Source & flagged code

10 flagged

supervisor.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

6const os = require('os');

7const crypto = require('crypto');

8const { spawn, spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

10function wrapperSha12OnDisk() {

11 try {

12 const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js');

13 const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js');

14 const wp = fs.existsSync(primary) ? primary : fallback;

15 return crypto.createHash('sha256').update(fs.readFileSync(wp)).digest('hex').slice(0, 12);

16 } catch (_) { return null; }

17}

19const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();

20const spoolDir = path.join(projectDir, '.gm', 'exec-spool');

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

21fs.mkdirSync(spoolDir, { recursive: true });

23const STATUS_PATH = path.join(spoolDir, '.status.json');

24const SHUTDOWN_REASON_PATH = path.join(spoolDir, '.shutdown-reason.json');

25const SUPERVISOR_PATH = path.join(spoolDir, '.supervisor.json');

26const SUPERVISOR_PID_PATH = path.join(spoolDir, '.supervisor.pid');

27const LOG_PATH = path.join(spoolDir, '.watcher.log');

plugkit-wasm-wrapper.jsView file

Lines 1-24javascript

1import fs from 'fs';

2import path from 'path';

3import os from 'os';

4import crypto from 'crypto';

5import https from 'https';

6import

lang-host-runner.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2'use strict';

3const fs = require('fs');

4const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lang-host-runner.jsView on unpkg · L2

Source & flagged code

10 flagged · loading source

supervisor.jsView file

7const crypto = require('crypto'); L8: const { spawn, spawnSync } = require('child_process'); L9:

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

7Cross-file remote execution chain: supervisor.js spawns plugkit-wasm-wrapper.js; helper contains network access plus dynamic code execution. L7: const crypto = require('crypto'); L8: const { spawn, spawnSync } = require('child_process'); L9: ... L11: try { L12: const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js'); L13: const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js'); ... L18: L19: const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd(); L20: const spoolDir = path.join(projectDir, '.gm', 'exec-spool'); ... L85: let supTs = 0; L86: try { supTs = (JSON.parse(fs.readFileSync(SUPERVISOR_PATH, 'utf-8')).ts) || 0; } catch (_) {} L87: const spool = readStatus();

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

plugkit-wasm-wrapper.jsView file

1032function isPortAliveSync(port) { L1033: const r = spawnSync(process.execPath, ['-e', ` L1034: const net = require('net'); L1035: const s = net.connect({ port: ${port}, host: '127.0.0.1' }); ... L1047: function playwriterHomeFor(cwd, claudeSessionId) { L1048: if (process.env.PLAYWRITER_HOME) return process.env.PLAYWRITER_HOME; L1049: if (!cwd) return path.join(GM_TOOLS_ROOT, `pw-sock-${sessionProfileSlug(claudeSessionId)}`);

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

plugkit-wasm-wrapper.jsView on unpkg · L1032

1009Trigger-reachable chain: manifest.bin -> plugkit-wasm-wrapper.js L1009: function isPortReachableSync(host, port, timeoutMs) { L1010: const r = spawnSync(process.execPath, ['-e', ` L1011: const net = require('net'); L1012: const s = net.connect({ port: ${port}, host: ${JSON.stringify(host)} }); ... L1024: const srv = net.createServer(); L1025: srv.listen(0, '127.0.0.1', () => { const p = srv.address().port; srv.close(() => { process.stdout.write(String(p)); }); }); L1026: srv.on('error', e => { process.stderr.write(e.message); process.exit(1); });

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

plugkit-wasm-wrapper.jsView on unpkg · L1009

720function findBrowserRunner() { L721: const npmR = spawnSync('npm', ['root', '-g'], { encoding: 'utf-8', shell: true }); L722: if (npmR.status === 0 && npm[redacted]()) {

High

Shell

Package source references shell execution.

plugkit-wasm-wrapper.jsView on unpkg · L720

712if (!_aggregateCpuProfileFn) { L713: _aggregateCpuProfileFn = new Function(AGGREGATE_CPU_PROFILE_SRC + '\nreturn aggregateCpuProfile;')(); L714: }

High

Eval

Package source references dynamic code evaluation.

plugkit-wasm-wrapper.jsView on unpkg · L712

1009function isPortReachableSync(host, port, timeoutMs) { L1010: const r = spawnSync(process.execPath, ['-e', ` L1011: const net = require('net'); L1012: const s = net.connect({ port: ${port}, host: ${JSON.stringify(host)} }); ... L1024: const srv = net.createServer(); L1025: srv.listen(0, '127.0.0.1', () => { const p = srv.address().port; srv.close(() => { process.stdout.write(String(p)); }); }); L1026: srv.on('error', e => { process.stderr.write(e.message); process.exit(1); });

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

plugkit-wasm-wrapper.jsView on unpkg · L1009

1275logEvent('plugkit', 'browser.chromium-installing', {}); L1276: spawnSync(process.platform === 'win32' ? 'npx.cmd' : 'npx', ['--yes', 'playwright', 'install', 'chromium'], { L1277: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

plugkit-wasm-wrapper.jsView on unpkg · L1275

4import crypto from 'crypto'; L5: import https from 'https'; L6: import http from 'http'; L7: import { watch } from 'fs'; L8: import * as _childProcess from 'child_process'; L9: import { spawn as _rawSpawn, spawnSync as _rawSpawnSync } from 'child_process'; ... L27: const __filename = fileURLToPath(import.meta.url); L28: const __dirname = path.dirname(__filename); L29: ... L40: L41: const GM_LOG_ROOT = process.env.GM_LOG_DIR || path.join(os.homedir(), '.claude', 'gm-log'); L42: const ORCHESTRATOR_VERBS = new Set(['instruction', 'transition', 'phase-status', 'prd-add', 'prd-resolve', 'prd-list', 'mutable-add', 'mutable-resolve', 'mutable-list', 'memorize-f...

Low

Weak Crypto

Package source references weak cryptographic algorithms.

plugkit-wasm-wrapper.jsView on unpkg · L4

lang-host-runner.jsView file

2'use strict'; L3: const fs = require('fs'); L4: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lang-host-runner.jsView on unpkg · L2

Findings

2 Critical6 High4 Medium4 Low

CriticalSame File Env Network Executionplugkit-wasm-wrapper.js

CriticalTrigger Reachable Dangerous Capabilityplugkit-wasm-wrapper.js

HighChild Processsupervisor.js

HighShellplugkit-wasm-wrapper.js

HighEvalplugkit-wasm-wrapper.js

HighCommand Output Exfiltrationplugkit-wasm-wrapper.js

HighCross File Remote Execution Contextsupervisor.js

HighRuntime Package Installplugkit-wasm-wrapper.js

MediumDynamic Requirelang-host-runner.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowWeak Cryptoplugkit-wasm-wrapper.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

10 flagged

supervisor.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2'use strict';

4const fs = require('fs');

5const path = require('path');

6const os = require('os');

7const crypto = require('crypto');

8const { spawn, spawnSync } = require('child_process');

High

Child Process

Package source references child process execution.

supervisor.jsView on unpkg · L7

10function wrapperSha12OnDisk() {

11 try {

12 const primary = path.join(os.homedir(), '.gm-tools', 'plugkit-wasm-wrapper.js');

13 const fallback = path.join(os.homedir(), '.claude', 'gm-tools', 'plugkit-wasm-wrapper.js');

14 const wp = fs.existsSync(primary) ? primary : fallback;

15 return crypto.createHash('sha256').update(fs.readFileSync(wp)).digest('hex').slice(0, 12);

16 } catch (_) { return null; }

17}

19const projectDir = process.env.CLAUDE_PROJECT_DIR || process.cwd();

20const spoolDir = path.join(projectDir, '.gm', 'exec-spool');

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

supervisor.jsView on unpkg · L7

21fs.mkdirSync(spoolDir, { recursive: true });

23const STATUS_PATH = path.join(spoolDir, '.status.json');

24const SHUTDOWN_REASON_PATH = path.join(spoolDir, '.shutdown-reason.json');

25const SUPERVISOR_PATH = path.join(spoolDir, '.supervisor.json');

26const SUPERVISOR_PID_PATH = path.join(spoolDir, '.supervisor.pid');

27const LOG_PATH = path.join(spoolDir, '.watcher.log');

plugkit-wasm-wrapper.jsView file

Lines 1-24javascript

1import fs from 'fs';

2import path from 'path';

3import os from 'os';

4import crypto from 'crypto';

5import https from 'https';

6import

lang-host-runner.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2'use strict';

3const fs = require('fs');

4const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

lang-host-runner.jsView on unpkg · L2

Lines 692-740javascript

692 },

693 culprits,

694 };

695}`;

696

697let execProfileSeq = 0;

698function sweepStaleProfileTmp() {

699 try {

700 const dir = os.tmpdir();

701 const cutoff = Date.now() - 3600000;

702 for (const name of fs.readdirSync(dir)) {

703 if (!/^gm-prof-\d+-\d+\.js$/.test(name)) continue;

704 const fp = path.join(dir, name);

705 try { if (fs.statSync(fp).mtimeMs < cutoff) fs.unlinkSync(fp); } catch (_) {}

706 }

707 } catch (_) {}

708}

709try { sweepStaleProfileTmp(); } catch (_) {}

710let _aggregateCpuProfileFn = null;

711function aggregateCpuProfile(profile, topN) {

712 if (!_aggregateCpuProfileFn) {

713 _aggregateCpuProfileFn = new Function(AGGREGATE_CPU_PROFILE_SRC + '\nreturn aggregateCpuProfile;')();

714 }

High

Eval

Package source references dynamic code evaluation.

plugkit-wasm-wrapper.jsView on unpkg · L712

715 return _aggregateCpuProfileFn(profile, topN);

716}

717

718const BROWSER_RUNNER_BIN = process.env.GM_BROWSER_RUNNER_BIN || 'playwriter';

719

720function findBrowserRunner() {

721 const npmR = spawnSync('npm', ['root', '-g'], { encoding: 'utf-8', shell: true });

722 if (npmR.status === 0 && npmR.stdout.trim()) {

High

Shell

Package source references shell execution.

plugkit-wasm-wrapper.jsView on unpkg · L720

723 const root = npmR.stdout.trim().split(/\r?\n/).pop();

724 const binJs = path.join(root, BROWSER_RUNNER_BIN, 'bin.js');

725 if (fs.existsSync(binJs)) return { cmd: process.execPath, baseArgs: [binJs], shell: false };

726 }

727 const whichCmd = process.platform === 'win32' ? 'where' : 'which';

728 const r = spawnSync(whichCmd, [BROWSER_RUNNER_BIN], { encoding: 'utf-8', shell: true });

729 if (r.status === 0 && r.stdout.trim()) {

730 const candidates = r.stdout.split(/\r?\n/).map(l => l.trim()).filter(Boolean);

731 const cmd = candidates.find(c => c.toLowerCase().endsWith('.cmd')) || candidates.find(c => !c.toLowerCase().endsWith('.ps1')) || candidates[0];

732 if (cmd) return { cmd, baseArgs: [], shell: process.platform === 'win32' };

733 }

734 const bunR = spawnSync(whichCmd, ['bun'], { encoding: 'utf-8', shell: true });

735 if (bunR.status === 0 && bunR.stdout.trim()) {

736 return { cmd: 'bun', baseArgs: ['x', `${BROWSER_RUNNER_BIN}@latest`], shell: true };

737 }

738 const npxR = spawnSync(whichCmd, ['npx'], { encoding: 'utf-8', shell: true });

739 if (npxR.status === 0 && npxR.stdout.trim()) {

740 return { cmd: 'npx', baseArgs: ['-y', BROWSER_RUNNER_BIN], shell: true };

Lines 989-1052javascript

989

990function resolveWindowsExeLocal(cmd) {

991 if (process.platform !== 'win32') return cmd;

992 try {

993 const out = spawnSync('where', [cmd], {

994 encoding: 'utf-8',

995 stdio: ['ignore', 'pipe', 'ignore'],

996 windowsHide: true,

997 timeout: 800,

998 });

999 if (out.status !== 0) return cmd;

1000 const lines = (out.stdout || '').split(/\r?\n/).map(l => l.trim()).filter(Boolean);

1001 const exe = lines.find(l => /\.exe$/i.test(l));

1002 const shim = lines.find(l => /\.(cmd|bat)$/i.test(l));

1003 return exe || shim || cmd;

1004 } catch {

1005 return cmd;

1006 }

1007}

1008

1009function isPortReachableSync(host, port, timeoutMs) {

1010 const r = spawnSync(process.execPath, ['-e', `

1011 const net = require('net');

1012 const s = net.connect({ port: ${port}, host: ${JSON.stringify(host)} });

1013 let done = false;

1014 s.on('connect', () => { done = true; s.destroy(); process.exit(0); });

1015 s.on('error', () => { if (!done) process.exit(1); });

1016 setTimeout(() => { if (!done) { s.destroy(); process.exit(1); } }, ${timeoutMs || 800});

1017 `], { timeout: (timeoutMs || 800) + 2000, windowsHide: true });

1018 return r.status === 0;

1019}

1020

1021function findFreePortSync() {

1022 const r = spawnSync(process.execPath, ['-e', `

1023 const net = require('net');

1024 const srv = net.createServer();

1025 srv.listen(0, '127.0.0.1', () => { const p = srv.address().port; srv.close(() => { process.stdout.write(String(p)); }); });

1026 srv.on('error', e => { process.stderr.write(e.message); process.exit(1); });

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

plugkit-wasm-wrapper.jsView on unpkg · L1009

1027 `], { encoding: 'utf-8', timeout: 5000 });

1028 if (r.status !== 0) throw new Error('could not allocate free port');

1029 return parseInt(r.stdout.trim(), 10);

1030}

1031

1032function isPortAliveSync(port) {

1033 const r = spawnSync(process.execPath, ['-e', `

1034 const net = require('net');

1035 const s = net.connect({ port: ${port}, host: '127.0.0.1' });

1036 s.on('connect', () => { s.destroy(); process.exit(0); });

1037 s.on('error', () => process.exit(1));

1038 setTimeout(() => process.exit(1), 800);

1039 `], { timeout: 2000 });

1040 return r.status === 0;

1041}

1042

1043function sleepSync(ms) {

1044 Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, Math.max(0, ms | 0));

1045}

1046

1047function playwriterHomeFor(cwd, claudeSessionId) {

1048 if (process.env.PLAYWRITER_HOME) return process.env.PLAYWRITER_HOME;

1049 if (!cwd) return path.join(GM_TOOLS_ROOT, `pw-sock-${sessionProfileSlug(claudeSessionId)}`);

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

plugkit-wasm-wrapper.jsView on unpkg · L1032

1050 try { ensureGitignored(cwd, '.gm/pw-sock-*/'); } catch (_) {}

1051 return path.join(cwd, '.gm', `pw-sock-${sessionProfileSlug(claudeSessionId)}`);

1052}