overtree@0.1.2: Clean npm security report (Allow) | LPM Firewall

Loading npm security reports…

overtree@0.1.2: Clean npm security report (Allow) | LPM Firewall

Source & flagged code

7 flagged · loading source

src/web-autostart.jsView file

1import { execFile, spawn } from "node:child_process"; L2: import fs from "node:fs/promises";

High

Child Process

Package source references child process execution.

src/web-autostart.jsView on unpkg · L1

1import { execFile, spawn } from "node:child_process"; L2: import fs from "node:fs/promises"; L3: import http from "node:http"; L4: import net from "node:net"; ... L12: function normalizeHost(host) { L13: return String(host || process.env.AGINTI_WEB_HOST || process.env.HOST || DEFAULT_HOST).trim() || DEFAULT_HOST; L14: }

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/web-autostart.jsView on unpkg · L1

src/agent-runner.jsView file

605? `A shell command tool is available inside Docker sandbox mode ${config.sandboxMode}. Docker workspace mode with approved package installs supports broader setup and network comma... L606: : `A host shell command tool is available under the configured trust policy on ${platformLabel(platform)}. On native Windows, prefer PowerShell/cmd-compatible commands or switch to... L607: : "No shell command tool is available.",

High

Shell

Package source references shell execution.

src/agent-runner.jsView on unpkg · L605

src/skillmesh.jsView file

3import fsSync from "node:fs"; L4: import http from "node:http"; L5: import os from "node:os"; ... L7: import process from "node:process"; L8: import { execFileSync } from "node:child_process"; L9: import { fileURLToPath } from "node:url"; ... L61: downloadPolicy: { L62: autoDownloadMetadata: true, L63: autoDownloadPacks: false, ... L88: try { L89: return JSON.parse(await fs.readFile(filePath, "utf8")); L90: } catch {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/skillmesh.jsView on unpkg · L3

src/auto-update.jsView file

165return await new Promise((resolve) => { L166: const child = spawn(npmCommand(), ["install", "-g", `${packageName}@latest`, "--no-audit", "--no-fund"], { L167: stdio: "inherit", ... L174: code, L175: error: code === 0 ? "" : `npm install exited with ${signal || code}`, L176: });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/auto-update.jsView on unpkg · L165

scripts/setup-agent-toolchain-docker.shView file

•path = scripts/setup-agent-toolchain-docker.sh kind = build_helper sizeBytes = 3892 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup-agent-toolchain-docker.shView on unpkg

src/project.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = overtree@0.1.1 matchedIdentity = npm:b3ZlcnRyZWU:0.1.1 similarity = 0.897 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/project.jsView on unpkg

Source & flagged code

7 flagged

src/web-autostart.jsView file

Lines 1-21javascript

1import { execFile, spawn } from "node:child_process";

2import fs from "node:fs/promises";

High

Child Process

Package source references child process execution.

src/web-autostart.jsView on unpkg · L1

3import http from "node:http";

4import net from "node:net";

5import os from "node:os";

6import path from "node:path";

7

8const DEFAULT_HOST = "127.0.0.1";

9const DEFAULT_PORT = 3210;

10const MAX_PORT_ATTEMPTS = 50;

11

12function normalizeHost(host) {

13 return String(host || process.env.AGINTI_WEB_HOST || process.env.HOST || DEFAULT_HOST).trim() || DEFAULT_HOST;

14}

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/web-autostart.jsView on unpkg · L1

15

16function normalizePort(port) {

17 const parsed = Number(port || process.env.AGINTI_WEB_PORT || process.env.PORT || DEFAULT_PORT);

18 return Number.isInteger(parsed) && parsed > 0 && parsed < 65536 ? parsed : DEFAULT_PORT;

19}

20

21function webUrl(host, port) {

src/agent-runner.jsView file

Lines 585-625javascript

585 {

586 role: "system",

587 content: [

588 "You are a careful browser and shell agent with a small tool surface.",

589 "Use only the provided tools.",

590 "The execution plan is not the final answer. After planning, actively use tools until the requested task is complete or genuinely blocked.",

src/skillmesh.jsView file

Lines 1-23javascript

1import crypto from "node:crypto";

2import fs from "node:fs/promises";

3import fsSync from "node:fs";

4import http from "node:http";

src/auto-update.jsView file

Lines 145-185javascript

145 if (raw === undefined || raw === "") return DEFAULT_CHECK_INTERVAL_MS;

146 const value = Number(raw);

147

scripts/setup-agent-toolchain-docker.shView file

•path = scripts/setup-agent-toolchain-docker.sh kind = build_helper sizeBytes = 3892 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup-agent-toolchain-docker.shView on unpkg

src/project.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = overtree@0.1.1 matchedIdentity = npm:b3ZlcnRyZWU:0.1.1 similarity = 0.897 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/project.jsView on unpkg