registry / patchwarden / 1.1.0

patchwarden@1.1.0

Secure local MCP bridge for ChatGPT and local agents, with workspace-scoped tasks, safe summaries, audits, and Direct editing.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 199 file(s), 2.60 MB of source, external domains: 127.0.0.1, api.github.com, bugs.chromium.org, bugs.webkit.org, bugzilla.mozilla.org, github.com, registry.npmjs.org, tailwindcss.com, www.w3.org

Source & flagged code

6 flagged

dist/tools/androidDoctor.jsView file

Lines 1-29javascript

1/**

2 * PatchWarden Android Doctor — read-only Android build environment diagnostics.

3 *

4 * Inspects a repository for an `android_app` directory and reports whether the

5 * local environment can build an APK. The module is strictly read-only: it never

6 * auto-downloads the Android SDK, never modifies system environment variables,

7 * and never installs global dependencies. It only runs `java -version` (read-only)

8 * and inspects files/directories/env vars that already exist.

9 */

10import { execSync } from "node:child_process";

11import { existsSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/tools/androidDoctor.jsView on unpkg · L9

12import { join } from "node:path";

13// ── Constants ──────────────────────────────────────────────────────

14/**

15 * Required explanatory sentence emitted whenever the Android SDK is missing.

16 * Callers rely on this exact wording to detect the "SDK missing" condition.

17 */

18const SDK_MISSING_REASON = "Android project exists, APK not built because Android SDK is missing.";

19// ── Helpers ────────────────────────────────────────────────────────

20/**

21 * Run a shell command and return its trimmed combined stdout/stderr output.

22 * Returns an empty string when the command is missing or fails so callers can

23 * treat absence gracefully. A timeout guards against hanging processes.

24 */

25function runCmd(cmdStr) {

26 try {

27 return execSync(cmdStr, {

28 encoding: "utf-8",

29 timeout: 8000,

dist/runner/runTask.jsView file

Lines 695-735javascript

695 stdoutStream?.destroy();

696 stderrStream?.destroy();

697 writeTaskRuntime(options.taskDir, {

698 phase: options.phase,

699 last_heartbeat_at: new Date().toISOString(),

700 current_command: null,

701 runner_pid: process.pid,

702 child_pid: undefined

dist/smoke-test.jsView file

Lines 601-641javascript

601 }

602 catch (error) {

603 const payload = errorPayload(error);

604 if (payload.reason !== "test_command_not_allowlisted")

605 throw error;

606 }

607 const

scripts/checks/control-center-smoke.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * PatchWarden Control Center — smoke test (test mode).

4 *

5 * Strict invariants:

6 * - Does NOT open a browser.

7 * - Does NOT call manage-patchwarden.ps1 for real start/stop operations.

8 * - Does NOT kill any process other than the controlCenter child it spawned.

9 * - Uses test port 18090 via PATCHWARDEN_CONTROL_PORT.

10 * - Always shuts down the spawned server (even on failure).

11 *

PatchWarden-Desktop.cmdView file

•path = PatchWarden-Desktop.cmd kind = build_helper sizeBytes = 194 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

PatchWarden-Desktop.cmdView on unpkg

Source & flagged code

6 flagged · loading source

dist/tools/androidDoctor.jsView file

9*/ L10: import { execSync } from "node:child_process"; L11: import { existsSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/tools/androidDoctor.jsView on unpkg · L9

dist/runner/runTask.jsView file

715const shim = /^pnpm/i.test(command) ? "pnpm.cmd" : "npm.cmd"; L716: command = process.env.ComSpec || "cmd.exe"; L717: args = ["/d", "/s", "/c", shim, ...args];

High

Shell

Package source references shell execution.

dist/runner/runTask.jsView on unpkg · L715

dist/smoke-test.jsView file

621"process.env.PATCHWARDEN_CONFIG = configPath;", L622: "import(moduleUrl).then((module) => module.loadConfig()).then(() => process.exit(0)).catch((error) => { console.error(error.message); process.exit(2); });", L623: ].join("");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/smoke-test.jsView on unpkg · L621

scripts/checks/control-center-smoke.jsView file

1010L1011: child = spawn("node", [serverPath], { L1012: cwd: projectRoot, L1013: env: { L1014: ...process.env, L1015: PATCHWARDEN_CONTROL_PORT: String(TEST_PORT), ... L1021: // is exactly the fault-tolerance path we want to exercise. L1022: PATCHWARDEN_CORE_URL: "http://127.0.0.1:18080", L1023: PATCHWARDEN_DIRECT_URL: "http://127.0.0.1:18081",

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/checks/control-center-smoke.jsView on unpkg · L1010

14Cross-file remote execution chain: scripts/checks/control-center-smoke.js spawns ui/vendor/tailwindcss-browser.js; helper contains network access plus dynamic code execution. L14: L15: import { spawn, execSync } from "node:child_process"; L16: import http from "node:http"; L17: import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync } from "node:fs"; ... L20: L21: const __dirname = dirname(fileURLToPath(import.meta.url)); L22: const projectRoot = join(__dirname, "..", ".."); ... L40: let childExitInfo = null; L41: let childStderr = ""; L42: let childStdout = ""; ... L128: res.on("data", (chunk) => (data += chunk)); L129: res.on("end", () => resolve({ status: res.statusCode, headers: res.headers, body: data }));

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

scripts/checks/control-center-smoke.jsView on unpkg · L14

PatchWarden-Desktop.cmdView file

•path = PatchWarden-Desktop.cmd kind = build_helper sizeBytes = 194 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

PatchWarden-Desktop.cmdView on unpkg

Findings

4 High5 Medium4 Low

HighChild Processdist/tools/androidDoctor.js

HighShelldist/runner/runTask.js

HighSame File Env Network Executionscripts/checks/control-center-smoke.js

HighCross File Remote Execution Contextscripts/checks/control-center-smoke.js

MediumDynamic Requiredist/smoke-test.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build HelperPatchWarden-Desktop.cmd

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/tools/androidDoctor.jsView file

Lines 1-29javascript

1/**

2 * PatchWarden Android Doctor — read-only Android build environment diagnostics.

3 *

4 * Inspects a repository for an `android_app` directory and reports whether the

5 * local environment can build an APK. The module is strictly read-only: it never

6 * auto-downloads the Android SDK, never modifies system environment variables,

7 * and never installs global dependencies. It only runs `java -version` (read-only)

8 * and inspects files/directories/env vars that already exist.

9 */

10import { execSync } from "node:child_process";

11import { existsSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/tools/androidDoctor.jsView on unpkg · L9

12import { join } from "node:path";

13// ── Constants ──────────────────────────────────────────────────────

14/**

15 * Required explanatory sentence emitted whenever the Android SDK is missing.

16 * Callers rely on this exact wording to detect the "SDK missing" condition.

17 */

18const SDK_MISSING_REASON = "Android project exists, APK not built because Android SDK is missing.";

19// ── Helpers ────────────────────────────────────────────────────────

20/**

21 * Run a shell command and return its trimmed combined stdout/stderr output.

22 * Returns an empty string when the command is missing or fails so callers can

23 * treat absence gracefully. A timeout guards against hanging processes.

24 */

25function runCmd(cmdStr) {

26 try {

27 return execSync(cmdStr, {

28 encoding: "utf-8",

29 timeout: 8000,

dist/runner/runTask.jsView file

Lines 695-735javascript

695 stdoutStream?.destroy();

696 stderrStream?.destroy();

697 writeTaskRuntime(options.taskDir, {

698 phase: options.phase,

699 last_heartbeat_at: new Date().toISOString(),

700 current_command: null,

701 runner_pid: process.pid,

702 child_pid: undefined

dist/smoke-test.jsView file

Lines 601-641javascript

601 }

602 catch (error) {

603 const payload = errorPayload(error);

604 if (payload.reason !== "test_command_not_allowlisted")

605 throw error;

606 }

607 const

scripts/checks/control-center-smoke.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * PatchWarden Control Center — smoke test (test mode).

4 *

5 * Strict invariants:

6 * - Does NOT open a browser.

7 * - Does NOT call manage-patchwarden.ps1 for real start/stop operations.

8 * - Does NOT kill any process other than the controlCenter child it spawned.

9 * - Uses test port 18090 via PATCHWARDEN_CONTROL_PORT.

10 * - Always shuts down the spawned server (even on failure).

11 *

PatchWarden-Desktop.cmdView file

•path = PatchWarden-Desktop.cmd kind = build_helper sizeBytes = 194 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

PatchWarden-Desktop.cmdView on unpkg

Lines 990-1030javascript

990 if (typeof json.url !== "string" || !json.url.includes(`${TEST_PORT}`)) {

991 problems.push(`'url' missing or does not reference port ${TEST_PORT}: ${json.url}`);

992 }

993 if (typeof json.version !== "string") problems.push("'version' is not a string");

994 if (problems.length === 0) {

995 record(name, true);

996 } else {

997 record(name, false, problems.join("; "));

998 }

999 } catch (err) {

1000 record(name, false, `error: ${err.message}`);

1001 }

1002}

1003

1004async function main() {

1005 // Sanity: ensure the compiled server exists before spawning.

1006 if (!existsSync(serverPath) || !statSync(serverPath).isFile()) {

1007 console.error(`[control-center-smoke] FATAL: ${serverPath} not found. Run 'npm run build' first.`);

1008 process.exit(1);

1009 }

1010

1011 child = spawn("node", [serverPath], {

1012 cwd: projectRoot,

1013 env: {

1014 ...process.env,

1015 PATCHWARDEN_CONTROL_PORT: String(TEST_PORT),

1016 PATCHWARDEN_CONTROL_LOG_DIR: TEST_LOG_DIR,

1017 PATCHWARDEN_CONTROL_FORCE_MISSING_TUNNEL_CLIENT: "1",

1018 // Point Core/Direct health probes at ports that are not listening, so the

1019 // smoke test does NOT depend on the real 8080/8081 being free on the host.

1020 // The probes will get ECONNREFUSED -> available:false with a reason, which

1021 // is exactly the fault-tolerance path we want to exercise.

1022 PATCHWARDEN_CORE_URL: "http://127.0.0.1:18080",

1023 PATCHWARDEN_DIRECT_URL: "http://127.0.0.1:18081",

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/checks/control-center-smoke.jsView on unpkg · L1010

1024 },

1025 stdio: ["pipe", "pipe", "pipe"],

1026 });

1027

1028 child.stdout.on("data", (chunk) => {

1029 childStdout += chunk.toString("utf-8");

1030 });