registry / keyring-agent-core / 0.3.1
keyring-agent-core@0.3.1
Core AI chat agent with multi-agent architecture, ReAct pattern, and modular tool system powered by Gemini
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe suspicious metadata literals are part of a bundled URL-safety blocklist, and apparent .exec calls are regular-expression use. Source inspection found no malicious execution, harvesting, persistence, or install hook.
Static reason
One or more suspicious static signals were detected.
Trigger
Consumer instantiates and uses AgentCore or its tools.
Impact
Configured prompts, keys, and requested blockchain data may be sent to the selected service endpoints as part of normal operation.
Mechanism
User-invoked AI, vector, and blockchain API requests.
AI rationale
The suspicious metadata literals are part of a bundled URL-safety blocklist, and apparent .exec calls are regular-expression use. Source inspection found no malicious execution, harvesting, persistence, or install hook.
Evidence
package.jsonREADME.mddist/index.jsdist/index.native.js
Network endpoints2
generativelanguage.googleapis.comnft.keyring.app/api/gemini-stable
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- Runtime chat functionality sends requests to configured Gemini/Keyring endpoints.
- Native bundle contains cloud-metadata host literals, but in a URL-safety denylist.
Evidence against
- package.json has only prepublishOnly; no install lifecycle hook.
- No child-process import, shell execution, eval, or payload loader found.
- No filesystem harvesting, persistence, or AI-agent control-surface writes found.
- Network use aligns with documented AI and blockchain-agent features.
Behavioral surface
ChildProcessEnvironmentVarsNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flagged · loading sourcedist/index.native.jsView file
676L677: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th...
L678:
High
Child Process
Package source references child process execution.
dist/index.native.jsView on unpkg · L676676L677: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th...
L678:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.native.jsView on unpkg · L6761if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol...
L2: "use strict";var Ire=Object.create;var Hg=Object.defineProperty;var Ore=Object.getOwnPropertyDescriptor;var Rre=Object.getOwnPropertyNames;var Nre=Object.getPrototypeOf,Mre=Object....
L3:
L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/
L5: `);super(n);f(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},aR=class extends zo{get is_bubble_up(){return!0}},Xce=class extends zo{constructor(t,e){super(t,e),this.na...
L6:
L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/
L8: `,t}var h_=Tpe.ns.sub("error"),kk=class extends h_.brand(Err
Findings
5 High3 Medium4 Low
HighChild Processdist/index.native.js
HighSame File Env Network Executiondist/index.native.js
HighCloud Metadata Accessdist/index.native.js
HighObfuscated Payload Loaderdist/index.native.js
HighSemantic Analysis Limiteddist/index.native.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to keyring-agent-core@0.3.1.
See all versions of keyring-agent-core for other recorded verdicts.
- Review the evidence and your use of keyring-agent-core@0.3.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.