registry / keyring-agent-core / 0.3.13
keyring-agent-core@0.3.13
Core AI chat agent with multi-agent architecture, ReAct pattern, and modular tool system powered by Gemini
AI Security Review
scanned 29d ago · by lpm-firewall-aiStatic inspection found ordinary agent and crypto-service API behavior, with no install hook or concrete malicious execution path. The observed network use is aligned with the package's exported AI and configuration functions.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Consumer code must instantiate and use the exported agent or configuration client.
Impact
No confirmed malicious effect, persistence, local file mutation, or credential exfiltration was established.
Mechanism
The bundles select an API base URL from caller-supplied configuration and issue HTTP requests for agent and exchange functionality.
AI rationale
Static inspection found ordinary agent and crypto-service API behavior, with no install hook or concrete malicious execution path. The observed network use is aligned with the package's exported AI and configuration functions.
Network endpoints3
nft.keyring.app/api/gemini-stablegenerativelanguage.googleapis.comexchange-api.keyring.app/admin/setting?configs=others
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes JavaScript and React Native bundle entrypoints and has no install lifecycle hook.
- Both entry bundles select Gemini's direct API only when an API key is supplied; otherwise they use the Keyring Gemini proxy.
- The bundles fetch application configuration from the Keyring exchange API; no file mutation, shell execution, or credential-harvesting behavior was identified in the inspected entrypoints.
Evidence against
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
5 flagged · loading sourcedist/index.native.jsView file
681L682: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th...
L683:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.native.jsView on unpkg · L6811if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol...
L2: "use strict";var tie=Object.create;var _y=Object.defineProperty;var rie=Object.getOwnPropertyDescriptor;var nie=Object.getOwnPropertyNames;var iie=Object.getPrototypeOf,oie=Object....
L3:
L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/
L5: `);super(n);f(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},aN=class extends Xo{get is_bubble_up(){return!0}},spe=class extends Xo{constructor(t,e){super(t,e),this.na...
L6:
L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/
L8: `,t}var Y_=Nfe.ns.sub("error"),mk=class extends Y_.brand(Err
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/index.native.jsView on unpkg · L1Findings
1 Critical4 High3 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighSame File Env Network Executiondist/index.native.js
HighCloud Metadata Accessdist/index.native.js
HighObfuscated Payload Loaderdist/index.native.js
HighSemantic Analysis Limiteddist/index.native.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to keyring-agent-core@0.3.13.
See all versions of keyring-agent-core for other recorded verdicts.
- Review the evidence and your use of keyring-agent-core@0.3.13 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.