registry / openrp-toolkit / 1.1.5

openrp-toolkit@1.1.5

Model Context Protocol (MCP) Server and AI Agent Skill Suite for OpenRP.ai

Static Scan Results

scanned 22d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 130 KB of source, external domains: github.com, image.pollinations.ai, openrp.ai, uixnaquqjhzcctyfoapf.supabase.co

Source & flagged code

2 flagged

bin/generate_image_behavior.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

3/**

4 * OpenRP Official Multimodal Image & RPG Story Generation Behavior

5 *

6 * 16-Node Full Visual Roleplay Pipeline:

7 * Ingestion -> Character RAG -> Dynamic Image Prompt Synthesizer -> LLM Roleplay Engine -> Image URL Generator -> Final Message Delivery

8 */

10const fs = require('fs');

11const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/generate_image_behavior.jsView on unpkg · L9

12const { validateBehaviorGraph } = require('./validator');

14const nodes = [

15 {

16 id: "chatMessage",

17 type: "events/chat_message",

18 position: { x: 0, y: 150 },

19 data: { customFields: [] },

20 lcaNodeId: null

21 },

22 {

23 id: "getChatMessage",

24 type: "storage/get_chat_message",

25 position: { x: 350, y: 150 },

26 data: { messageId: { "$expression": "chatMessage.messageId" } },

27 lcaNodeId: null

28 },

29 {

bin/behavior_runtime_verifier.jsView file

Lines 1-39javascript

1#!/usr/bin/env node

3/**

4 * OpenRP Automated Behavior Runtime Verifier

5 *

6 * Executes full lifecycle verification:

7 * 1. Pre-flight static schema check (0 errors)

8 * 2. Deploy or update behavior DAG to OpenRP API (handles existing behaviors)

9 * 3. Attach behavior to target character

10 * 4. Send action message to chatroom

11 * 5. Trigger direct editor execution runner (POST /api/v1/behaviors/:id/executions)

Source & flagged code

2 flagged · loading source

bin/generate_image_behavior.jsView file

openrp-toolkit@1.1.5

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code