registry / otterkit / 0.3.0

otterkit@0.3.0

OtterKit CLI — provision and connect tunnels for AI agents

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 59.6 KB of source, external domains: api.otterkit.com, app.otterkit.com, otterkit.app, www.otterkit.com

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2/**

3 * OtterKit CLI

4 *

5 * Instant tunnels and webhooks for AI agents.

6 * https://www.otterkit.com/docs

7 */

8import { spawn } from 'node:child_process';

9import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L7

10import { dirname, join, resolve } from 'node:path';

11import { Command } from 'commander';

12import { initPayment, getBackendName, provisionTunnel, provisionDaemonTunnel, InsufficientCreditsError, } from './provision.js';

13import { login, logout, whoami, balance } from './login.js';

14import { TunnelClient } from './tunnel-client.js';

15import { addDaemon, cleanupDaemons, removeDaemon, isProcessAlive, parseTtlMs } from './daemon.js';

16import { logRequest, getLogPath, readLog, clearLog, ensureRequestsDir } from './request-log.js';

17import { startFileServer } from './file-server.js';

18const __filename = fileURLToPath(import.meta.url);

19const __dirname = dirname(__filename);

20/* ── ANSI helpers ────────────────────────────────────────── */

21const c = {

22 reset: '\x1b[0m',

23 bold: '\x1b[1m',

24 dim: '\x1b[2m',

25 green: '\x1b[32m',

26 yellow: '\x1b[33m',

27 blue: '\x1b[34m',

dist/login.jsView file

Lines 1-30javascript

1/**

2 * `otterkit login` — browser device-authorization flow.

3 *

4 * 1. POST /api/device/start → prints a user code and opens the portal.

5 * 2. User signs in (Clerk) and approves the code in the portal.

6 * 3. CLI polls /api/device/poll until approved, then saves the token.

7 *

8 * Login/balance talk to the portal API (OTTERKIT_API_URL), distinct from

9 * tunnel provisioning which talks to OTTERKIT_TUNNEL_URL.

10 */

11import { spawn } from 'node:child_process'

Source & flagged code

3 flagged · loading source

dist/index.jsView file

7*/ L8: import { spawn } from 'node:child_process'; L9: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L7

dist/login.jsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/login.jsView on unpkg · L10

10*/ L11: import { spawn } from 'node:child_process'; L12: import { saveCredentials, clearCredentials, getToken, loadCredentials } from './credentials.js'; L13: const API_SERVER = process.env.OTTERKIT_API_URL || 'https://api.otterkit.com'; L14: /* ── ANSI helpers (kept local; mirrors index.ts) ── */ ... L32: }, L33: body: body ? JSON.stringify(body) : undefined, L34: }); L35: return (await resp.json().catch(() => ({ ok: false, error: 'bad_response' }))); L36: } L37: function openBrowser(url) { L38: const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open';

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/login.jsView on unpkg · L10

Findings

4 High3 Medium5 Low

HighChild Processdist/index.js

HighShell

HighSame File Env Network Executiondist/login.js

HighSandbox Evasion Gated Capabilitydist/login.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

2/**

3 * OtterKit CLI

4 *

5 * Instant tunnels and webhooks for AI agents.

6 * https://www.otterkit.com/docs

7 */

8import { spawn } from 'node:child_process';

9import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L7

10import { dirname, join, resolve } from 'node:path';

11import { Command } from 'commander';

12import { initPayment, getBackendName, provisionTunnel, provisionDaemonTunnel, InsufficientCreditsError, } from './provision.js';

13import { login, logout, whoami, balance } from './login.js';

14import { TunnelClient } from './tunnel-client.js';

15import { addDaemon, cleanupDaemons, removeDaemon, isProcessAlive, parseTtlMs } from './daemon.js';

16import { logRequest, getLogPath, readLog, clearLog, ensureRequestsDir } from './request-log.js';

17import { startFileServer } from './file-server.js';

18const __filename = fileURLToPath(import.meta.url);

19const __dirname = dirname(__filename);

20/* ── ANSI helpers ────────────────────────────────────────── */

21const c = {

22 reset: '\x1b[0m',

23 bold: '\x1b[1m',

24 dim: '\x1b[2m',

25 green: '\x1b[32m',

26 yellow: '\x1b[33m',

27 blue: '\x1b[34m',

dist/login.jsView file

Lines 1-30javascript

1/**

2 * `otterkit login` — browser device-authorization flow.

3 *

4 * 1. POST /api/device/start → prints a user code and opens the portal.

5 * 2. User signs in (Clerk) and approves the code in the portal.

6 * 3. CLI polls /api/device/poll until approved, then saves the token.

7 *

8 * Login/balance talk to the portal API (OTTERKIT_API_URL), distinct from

9 * tunnel provisioning which talks to OTTERKIT_TUNNEL_URL.

10 */

11import { spawn } from 'node:child_process'