registry / port-authority-agent-terminal-mcp / 0.3.14

port-authority-agent-terminal-mcp@0.3.14

⚠ Under review

Cross-platform (Windows + macOS) lane coordinator for AI coding agents (Claude, Codex, etc.) — keeps multiple local agents from colliding on dev-server ports, Chrome debug ports, and Chrome user profiles. Includes a CLI, an MCP server, and a native Tauri

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 18 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 52 file(s), 426 KB of source, external domains: 127.0.0.1, docs.claude.com, rustup.rs

Source & flagged code

10 flagged

package.jsonView file

Lines 52-92json

52 "gui/src-tauri/tauri.conf.json",

53 "gui/src-tauri/capabilities",

54 "gui/src-tauri/icons",

55 "gui/src-tauri/src",

56 "scripts/postinstall.cjs",

57 "scripts/build-dashboard-tauri.cjs",

58 "README.md",

59 "LICENSE",

60 "CHANGELOG.md"

61 ],

62 "scripts": {

63 "build": "npm run build:icons && npm run build:dashboard && tsc -p tsconfig.json",

64 "build:server": "tsc -p tsconfig.json",

65 "build:icons": "node scripts/build-icons.mjs",

66 "build:dashboard": "node scripts/build-dashboard-tauri.cjs",

67 "build:dashboard:strict": "node scripts/build-dashboard-tauri.cjs --strict",

68 "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",

69 "dev": "tsx src/cli/index.ts",

70 "prepare": "node scripts/prepare.cjs",

71 "prepack": "node scripts/prepack.cjs",

72 "postinstall": "node -e \"try{require('./scripts/postinstall.cjs')}catch(e){if(e&&e.code==='MODULE_NOT_FOUND'&&String(e.message).includes('scripts/postinstall.cjs')){console.warn('[paat postinstall] skipped missing helper: '+e.message);process.exit(0)}throw e}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L72

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L72

73 "test": "tsc -p tsconfig.json && node --test --test-reporter=spec dist/tests/*.test.js",

74 "lint": "tsc -p tsconfig.json --noEmit",

75 "chrome": "tsx scripts/chrome.ts",

76 "robust-test": "tsx scripts/robust-test.ts",

77 "robust-test:verbose": "tsx scripts/robust-test.ts --verbose",

78 "prepublishOnly": "npm run clean && npm run build"

79 },

80 "keywords": [

81 "windows",

82 "ai-agents",

83 "agent-coordination",

84 "claude",

85 "claude-desktop",

86 "codex",

87 "codex-desktop",

88 "chrome",

89 "chrome-devtools-protocol",

90 "cdp",

91 "remote-debugging",

92 "playwright",

dist/src/core/pagejs.jsView file

Lines 1-38javascript

1/**

2 * In-page JavaScript snippets shared by BOTH page-control drivers (BiDi for

3 * Firefox, CDP for Chrome/Edge). Every snippet is a single EXPRESSION that

4 * evaluates to a JSON string, so both protocols get back `{type:"string"}`

5 * and the driver just JSON.parses it — identical semantics in every browser.

6 *

7 * All user-supplied fragments (selectors, values, expressions) are embedded

8 * via JSON.stringify so quotes/backslashes/newlines can never break out of

9 * the generated code.

10 */

11/** Embed a user string safely inside generated JS. */

12function lit(value) {

13 return JSON.stringify(value);

14}

15/** Guard: every expression we build must parse as valid JS. Catches

16 * generator bugs (unbalanced braces etc.) before they reach a browser. */

17export function assertParses(expr) {

18 // new Function only PARSES here — nothing is executed.

19 new Function(`return (${expr});`);

20 return expr;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/core/pagejs.jsView on unpkg · L18

21}

22/** Page metadata: url, title, readyState. */

23export function metaExpr() {

24 return assertParses(`JSON.stringify({ url: location.href, title: document.title, readyState: document.readyState })`);

25}

26/** Visible text of the page (or of the first element matching `selector`),

27 * trimmed and capped so a huge page can't flood the agent's context. */

28export function textExpr(selector, maxChars) {

29 const target = selector === undefined ? "document.body" : `document.querySelector(${lit(selector)})`;

30 return assertParses(`JSON.stringify((() => {

31 const el = ${target};

32 if (!el) return { found: false, text: "" };

33 const t = (el.innerText ?? el.textContent ?? "").trim();

34 return { found: true, truncated: t.length > ${maxChars}, text: t.slice(0, ${maxChars}) };

35 })())`);

36}

37/** Click the first element matching `selector` (scrolls it into view first). */

38export function clickExpr(selector) {

scripts/build-dashboard-tauri.cjsView file

Lines 11-51javascript

11 * we don't want .msi/.dmg installers — npm is the install mechanism.

12 * 4. Copy the produced binary to bin/<binary-name> so the npm package can

13 * ship it. Naming:

14 * Windows: bin/paat-dashboard.exe

15 * macOS: bin/paat-dashboard-darwin-<arch>

16 * Linux: bin/paat-dashboard-linux-<arch>

17 *

18 * Why a Node wrapper around `cargo tauri`:

19 * - npm scripts can't cross-platform detect whether cargo is installed.

20 * - We want a readable message when the toolchain is missing.

21 * - We need to copy the produced binary out of target/release/ into bin/.

22 * - The committed bin/paat-dashboard.exe is the source of truth for

23 * Windows releases — this script only needs to run when the Rust /

24 * frontend source changes.

25 *

26 * Force a fail (useful in CI to verify the binary is up-to-date with

27 * source) by passing --strict.

28 */

30"use strict";

32const { spawnSync } = require("node:child_process");

33const path = require("node:path");

34const fs = require("node:fs");

35const os = require("node:os");

37const repoRoot = path.resolve(__dirname, "..");

38const guiDir = path.join(repoRoot, "gui");

39const cargoTargetDir = path.join(guiDir, "src-tauri", "target", "release");

40const binDir = path.join(repoRoot, "bin");

42const strict = process.argv.includes("--strict");

44function log(msg) { process.stdout.write(`[build-dashboard] ${msg}\n`); }

45function warn(msg) { process.stderr.write(`[build-dashboard] ${msg}\n`); }

47/** Resolve the platform-correct executable name for npm + cargo. Node

48 * doesn't auto-append .cmd on Windows when shell:false, so we have to. */

49function npmCmd() { return process.platform === "win32" ? "npm.cmd" : "npm"; }

50function cargoCmd() { return process.platform === "win32" ? "cargo.exe" : "cargo"; }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/build-dashboard-tauri.cjsView on unpkg · L31

bin/paat-dashboard.exeView file

•path = bin/paat-dashboard.exe kind = native_binary sizeBytes = 9714176 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/paat-dashboard.exeView on unpkg

dist/src/cli/install-mcp.jsView file

•matchType = normalized_sha256 matchedPackage = port-authority-agent-terminal-mcp@0.3.10 matchedPath = dist/src/cli/install-mcp.js matchedIdentity = npm:[redacted]:0.3.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/install-mcp.jsView on unpkg

scripts/postinstall.cjsView file

•matchType = normalized_sha256 matchedPackage = port-authority-agent-terminal-mcp@0.3.10 matchedPath = scripts/postinstall.cjs matchedIdentity = npm:[redacted]:0.3.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.cjsView on unpkg

dist/src/core/chrome.jsView file

•matchType = normalized_sha256 matchedPackage = port-authority-agent-terminal-mcp@0.3.10 matchedPath = dist/src/core/chrome.js matchedIdentity = npm:[redacted]:0.3.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/core/chrome.jsView on unpkg

dist/src/core/firefox.jsView file

•matchType = normalized_sha256 matchedPackage = port-authority-agent-terminal-mcp@0.3.10 matchedPath = dist/src/core/firefox.js matchedIdentity = npm:[redacted]:0.3.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/core/firefox.jsView on unpkg

dist/src/cli/autostart.jsView file

•matchType = normalized_sha256 matchedPackage = port-authority-agent-terminal-mcp@0.3.10 matchedPath = dist/src/cli/autostart.js matchedIdentity = npm:[redacted]:0.3.10 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/autostart.jsView on unpkg

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "try{require('./scripts/postinstall.cjs')}catch(e){if(e&&e.code==='MODULE_NOT_FOUND'&&String(e.message).includes('scripts/postinstall.cjs')){console.warn('[paat postinstall...

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

dist/src/core/pagejs.jsView file

18// new Function only PARSES here — nothing is executed. L19: new Function(`return (${expr});`); L20: return expr;

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/core/pagejs.jsView on unpkg · L18

scripts/build-dashboard-tauri.cjsView file

31L32: const { spawnSync } = require("node:child_process"); L33: const path = require("node:path"); ... L36: L37: const repoRoot = path.resolve(__dirname, ".."); L38: const guiDir = path.join(repoRoot, "gui"); ... L43: L44: function log(msg) { process.stdout.write(`[build-dashboard] ${msg}\n`); } L45: function warn(msg) { process.stderr.write(`[build-dashboard] ${msg}\n`); } ... L48: * doesn't auto-append .cmd on Windows when shell:false, so we have to. */ L49: function npmCmd() { return process.platform === "win32" ? "npm.cmd" : "npm"; } L50: function cargoCmd() { return process.platform === "win32" ? "cargo.exe" : "cargo"; }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

scripts/build-dashboard-tauri.cjsView on unpkg · L31

bin/paat-dashboard.exeView file

•path = bin/paat-dashboard.exe kind = native_binary sizeBytes = 9714176 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/paat-dashboard.exeView on unpkg

dist/src/cli/install-mcp.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/install-mcp.jsView on unpkg

scripts/postinstall.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/postinstall.cjsView on unpkg

dist/src/core/chrome.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/core/chrome.jsView on unpkg

dist/src/core/firefox.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/core/firefox.jsView on unpkg

dist/src/cli/autostart.jsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/src/cli/autostart.jsView on unpkg

Findings

1 Critical7 High4 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighSandbox Evasion Gated Capabilityscripts/build-dashboard-tauri.cjs

HighKnown Malware Source Similaritydist/src/cli/install-mcp.js

HighKnown Malware Source Similarityscripts/postinstall.cjs

HighKnown Malware Source Similaritydist/src/core/chrome.js

HighKnown Malware Source Similaritydist/src/core/firefox.js

HighKnown Malware Source Similaritydist/src/cli/autostart.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarybin/paat-dashboard.exe

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/src/core/pagejs.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings