registry / keyring-agent-core / 0.2.64
keyring-agent-core@0.2.64
Core AI chat agent with multi-agent architecture, ReAct pattern, and modular tool system powered by Gemini
AI Security Review
scanned 2mo ago · by lpm-firewall-aiDirect inspection found a bundled AI/DeFi library with caller-configured network behavior, not a concealed payload or install-time attack. The static child-process, cloud-metadata, and obfuscation hints are not substantiated by the inspected source.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Consumer imports and configures AgentCore or invokes its agent tools.
Impact
Normal agent/network capability; no unconsented install-time mutation or exfiltration chain found.
Mechanism
Caller-configured Gemini and DeFi API requests.
AI rationale
Direct inspection found a bundled AI/DeFi library with caller-configured network behavior, not a concealed payload or install-time attack. The static child-process, cloud-metadata, and obfuscation hints are not substantiated by the inspected source.
Evidence
package.jsonREADME.mddist/index.jsdist/index.native.jsdist/index.d.ts
Network endpoints1
api.coinpool.app/faq
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Manifest has no preinstall, install, or postinstall hook; its sole lifecycle hook builds before publishing.
- README shows caller-initiated import and construction, with the caller supplying the Gemini API key.
- The flagged native artifact contains bundled dependencies and URL-safety checks; no child-process import, shell execution, or metadata-request chain was found.
Evidence against
- Runtime network use is consistent with the declared Gemini/DeFi agent package purpose.
- No credential harvesting, filesystem writes, persistence, dynamic payload execution, or agent-control-surface mutation was found.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
6 flagged · loading sourcedist/index.native.jsView file
675L676: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th...
L677:
High
Child Process
Package source references child process execution.
dist/index.native.jsView on unpkg · L675675L676: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th...
L677:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.native.jsView on unpkg · L6751if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol...
L2: "use strict";var Cre=Object.create;var jg=Object.defineProperty;var xre=Object.getOwnPropertyDescriptor;var Ire=Object.getOwnPropertyNames;var Ore=Object.getPrototypeOf,Rre=Object....
L3:
L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/
L5: `);super(n);f(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},XO=class extends Bo{get is_bubble_up(){return!0}},Wce=class extends Bo{constructor(t,e){super(t,e),this.na...
L6:
L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/
L8: `,t}var r_=vpe.ns.sub("error"),uk=class extends r_.brand(Err
Findings
1 Critical5 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/index.native.js
HighSame File Env Network Executiondist/index.native.js
HighCloud Metadata Accessdist/index.native.js
HighObfuscated Payload Loaderdist/index.native.js
HighSemantic Analysis Limiteddist/index.native.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to keyring-agent-core@0.2.64.
See all versions of keyring-agent-core for other recorded verdicts.
- Review the evidence and your use of keyring-agent-core@0.2.64 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.