registry / keyring-agent-core / 0.3.18
keyring-agent-core@0.3.18
Core AI chat agent with multi-agent architecture, ReAct pattern, and modular tool system powered by Gemini
AI Security Review
scanned 23d ago · by lpm-firewall-aiInspected behavior is consistent with an AI and wallet agent library, with caller-configured authentication and UI-producing wallet actions. Static inspection established no concrete malicious chain warranting a warning or publication block.
Static reason
One or more suspicious static signals were detected.
Trigger
Caller invocation of agent chat methods or registered tools; no automatic install hook was found.
Impact
Ordinary service requests and wallet interface preparation; no malicious impact was identified.
Mechanism
The client sends chat data to its configured service, while wallet tools return UI properties. No concrete malicious execution or covert credential export was established.
AI rationale
Inspected behavior is consistent with an AI and wallet agent library, with caller-configured authentication and UI-producing wallet actions. Static inspection established no concrete malicious chain warranting a warning or publication block.
Network endpoints2
nft.keyring.app/api/gemini-stablegenerativelanguage.googleapis.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest selects JavaScript and native entrypoints and contains no install lifecycle hooks or runtime self-dependency.
- The native Gemini client takes its API key from caller configuration and defaults to Google's API or the Keyring Gemini proxy.
- Gemini requests send chat contents and the configured API key through the client's request method.
- Wallet action code builds UI component properties rather than signing or broadcasting transactions.
- Targeted inspection found no shell execution, dynamic code evaluation, or private-key harvesting in either entrypoint.
Evidence against
Behavioral surface
EnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
4 flagged · loading sourcedist/index.native.jsView file
684L685: USER QUERY: ${e}`,timestamp:0}];try{let s=(await this.llm.chat(i)).text.trim().match(/\[[\s\S]*\]/);if(!s)return[];let l=JSON.parse(s[0]),c=[];for(let u of l)u.index>=0&&u.index<th...
L686:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.native.jsView on unpkg · L6841if(typeof Symbol!=="undefined"){if(!Symbol.asyncIterator){try{Symbol.asyncIterator=Symbol("Symbol.asyncIterator")}catch(e){}}if(!Symbol.asyncDispose){try{Symbol.asyncDispose=Symbol...
L2: "use strict";var lie=Object.create;var wy=Object.defineProperty;var cie=Object.getOwnPropertyDescriptor;var uie=Object.getOwnPropertyNames;var die=Object.getPrototypeOf,pie=Object....
L3:
L4: Troubleshooting URL: https://docs.langchain.com/oss/javascript/langgraph/${r.lc_error_code}/
L5: `);super(n);f(this,"lc_error_code");this.lc_error_code=r?.lc_error_code}},pN=class extends Xo{get is_bubble_up(){return!0}},ype=class extends Xo{constructor(t,e){super(t,e),this.na...
L6:
L7: Troubleshooting URL: https://docs.langchain.[redacted]/${e}/
L8: `,t}var rb=zfe.ns.sub("error"),Sk=class extends rb.brand(Err
High
Cloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
dist/index.native.jsView on unpkg · L1Findings
4 High3 Medium6 Low
HighSame File Env Network Executiondist/index.native.js
HighCloud Metadata Accessdist/index.native.js
HighObfuscated Payload Loaderdist/index.native.js
HighSemantic Analysis Limiteddist/index.native.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to keyring-agent-core@0.3.18.
See all versions of keyring-agent-core for other recorded verdicts.
- Review the evidence and your use of keyring-agent-core@0.3.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.