registry / nexus-agents / 2.151.0

nexus-agents@2.151.0

Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 80 file(s), 6.12 MB of source, external domains: aistudio.google.com, api.github.com, api.openalex.org, api.osv.dev, api.semanticscholar.org, arxiv.org, bsky.app, bsky.social, cdimage.debian.org, console.anthropic.com, developers.openai.com, docs.bsky.app, download.fedoraproject.org, export.arxiv.org, fedoraproject.org, github.com, help.ubuntu.com, img.shields.io, nodejs.org, opencode.ai, paperswithcode.com, platform.openai.com, registry.npmjs.org, releases.ubuntu.com, www.debian.org, www.githubstatus.com, www.w3.org

Source & flagged code

9 flagged

package.jsonView file

Lines 107-129json

107 },

108 "@ai-sdk/openai": {

109 "optional": true

110 },

111 "@ai-sdk/google": {

112 "optional": true

113 }

114 },

115 "scripts": {

116 "build": "tsup",

117 "dev": "tsup --watch",

118 "test": "vitest run",

119 "test:e2e": "vitest run --config vitest.config.e2e.ts",

120 "test:coverage": "vitest run --coverage",

121 "lint": "eslint src/",

122 "lint:fix": "eslint src/ --fix",

123 "typecheck": "tsc --noEmit",

124 "docs": "typedoc",

125 "docs:watch": "typedoc --watch",

126 "docs:api:md": "typedoc --options typedoc.markdown.json",

127 "postinstall": "node scripts/postinstall.js || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L127

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L127

128 }

129}

dist/chunk-ZM4O442V.jsView file

Lines 672-712javascript

672 " - Use cryptographically secure RNG (crypto.randomBytes, /dev/urandom)",

673 " - Minimum entropy: API keys 256-bit, passwords 128-bit",

674 " - Generate secrets in secure environment, not dev machines",

675 "STORAGE:",

676 " - Secrets manager (Vault, AWS Secrets Manager, GCP Secret Manager)",

677 " - Encrypted at rest with managed keys (AES-256-GCM)",

dist/chunk-KRCL3VT6.jsView file

1566).optional(), L1567: metadata: z4.record(z4.string(), z4.unknown()).optional() L1568: }), ... L7625: const fenced = extractCodeBlock(rawText); L7626: const parsed = JSON.parse(fenced?.[1] ?? rawText); L7627: const subtasks = parsed.map((item) => SubTaskSchema.safeParse(item)).filter((r) => r.success).map((r) => r.data); ... L7856: // -------------------------------------------------------------------------- L7857: // Private Methods L7858: // -------------------------------------------------------------------------- ... L8454: - Rule of Two: no agent may simultaneously process untrusted input + have write access + access secrets L8455: - Subprocess timeouts: always pass { timeout: N } to exec()/execAsync() calls L8456:

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/chunk-KRCL3VT6.jsView on unpkg · L1566

14416if (source.startsWith("./") || source.startsWith("/") || source.startsWith("../")) { L14417: const pathModule = await import("path"); L14418: return pathModule.resolve(process.cwd(), source);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunk-KRCL3VT6.jsView on unpkg · L14416

34728const findings = []; L34729: if (code.includes("eval(")) findings.push("eval() usage"); L34730: if (code.includes("innerHTML")) findings.push("innerHTML XSS risk");

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/chunk-KRCL3VT6.js

dist/cli.jsView file

19114patternName = aws_access_key severity = critical line = 19114 matchedText = code: 'c...";',

Critical

Secret Pattern

AWS access key ID in dist/cli.js

dist/cli.jsView on unpkg · L19114

407const apiKeysConfigured = API_KEY_VARS.filter( L408: (key) => typeof process.env[key] === "string" && process.env[key] !== "" L409: ).length; ... L412: nodeVersion: process.version, L413: platform: process.platform, L414: arch: process.arch, ... L420: const write3 = (text) => { L421: process.stdout.write(text + "\n"); L422: }; ... L446: write3( L447: `${colors.dim}Documentation: https://github.com/nexus-substrate/nexus-agents${colors.reset}` L448: );

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L407

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code