registry  /  qlogicagent  /  2.17.3

qlogicagent@2.17.3

XiaozhiClaw Agent CLI — subprocess architecture (JSON-RPC over stdio)

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 19 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShell
Supply chain
HighEntropyStringsMinifiedObfuscatedUrlStrings
Manifest
NoLicense
scanned 10 file(s), 3.93 MB of source, external domains: cursor.com, docs.github.com, docs.qoder.com, github.com, json-schema.org, kiro.dev, opencode.ai, pypi.tuna.tsinghua.edu.cn, registry.npmmirror.com, www.pinecone.io, xiaozhi.qlogicagent.com

Source & flagged code

10 flagged · loading source
dist/index.jsView file
615`)}function Rre(){return hv(new ms(oS),new ei(20,_s),new ka(_s))}function ZN(t,e){let n=yv(new ms(oS),new ei(20,_s),new kl({protectedHeadExchanges:1,protectedTailMessages:8,summari... L616: `),error:A.details?.error}}catch(S){return{result:"",error:S instanceof Error?S.message:String(S)}}}},createAgentRunner:Po,tools:this.toolCatalog.getToolManifest(),taskStore:this.t... L617: `)}var Oa=t=>(e,n,r,o)=>{let i=r?{...r,async:!1}:{async:!1},s=e._zod.run({value:n,issues:[]},i);if(s instanceof Promise)throw new yr;if(s.issues.length){let a=new(o?.Err??t)(s.issu...
High
Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L615
425`)}function sD(t){try{return JSON.parse(t)}catch{return null}}function ZM(...t){for(let e of t)if(typeof e=="string"&&e.trim())return e.trim();return null}function Ck(t){for(let e ... L426: ${n}`),i=Ek(t)&&VM.test(e)&&r&&o&&/\b(?:ok|success|passed|loaded|visible|rendered|found|present|assertion passed)\b|可见|加载成功|通过/i.test(n),s=/\b(?:200|ok|success|passed|loaded|visibl... L427:
High
Shell

Package source references shell execution.

dist/index.jsView on unpkg · L425
679L680: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of t.seen.entries()){let a=s[1];if(e===s[0]){i(s);continue}if(t.external){let l=t.exter... L681: `);a=m.pop()||"";for(let f of m){let g=f.trim();if(g)try{let h=JSON.parse(g);s.enqueue(h)}catch(h){console.error("Failed to parse JSON message:",g,h)}}}let l=a.trim();if(l)try{let ... L682: `,c=t.getWriter();try{await c.write(n.encode(a))}finally{c.releaseLock()}}});return{readable:o,writable:i}}function Ai(t){return t??{}}function oF(t){let e=Promise.reject(t);return... L683: ${t?.data?.details??""}`;return/\b(auth(?:entication|orization)?|login|log in|api key|apikey|token|credential|provider|configured|configuration|setup|sign in)\b/i.test(e)}function ... L684: `),n=e.match(/^---\n[\s\S]*?^version:\s*(\S+)/m),r=e.match(/^---\n[\s\S]*?^description:\s*(.+)/m),o=e.match(/^---\n[\s\S]*?^category:\s*(.+)/m),i=e.match(/^---\n[\s\S]*?^author:\s*...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L679
677L678: `)}f.write("payload.value = newResult;"),f.write("return payload;");let b=f.compile();return(k,S)=>b(m,k,S)},i,s=Ms,a=!Es.jitless,l=a&&mS.value,d=e.catchall,p;t._zod.parse=(m,f)=>{... L679: L680: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of t.seen.entries()){let a=s[1];if(e===s[0]){i(s);continue}if(t.external){let l=t.exter... L681: `);a=m.pop()||"";for(let f of m){let g=f.trim();if(g)try{let h=JSON.parse(g);s.enqueue(h)}catch(h){console.error("Failed to parse JSON message:",g,h)}}}let l=a.trim();if(l)try{let ... L682: `,c=t.getWriter();try{await c.write(n.encode(a))}finally{c.releaseLock()}}});return{readable:o,writable:i}}function Ai(t){return t??{}}function oF(t){let e=Promise.reject(t);return... L683: ${t?.data?.details??""}`;return/\b(auth(?:entication|orization)?|login|log in|api key|apikey|token|credential|provider|configured|configuration|setup|sign in)\b/i.test(e)}function ... L684: `),n=e.match(/^---\n[\s\S]*?^version:\s*(\S+)/m),r=e.match(/^---\n[\s\S]*?^description:\s*(.+)/m),o=e.match(/^---\n[\s\S]*?^category:\s*(.+)/m),i=e.match(/^---\n[\s\S]*?^author:\s*...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L677
1var A9=Object.defineProperty;var kM=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof require<"u"?require:e)[n]}):t)(function(t){if(typeof require<"u"... L2: `),l=null;for(let p=0;p<Math.min(c.length,Qn.HEADER_LINES);p++){let m=c[p].trim();if(!(!m||m.startsWith("#")||m.startsWith("---"))){l=m.slice(0,150);break}}let d=Ree(o);return{file... ... L11: L12: `)}var Qn,C0=je(()=>{"use strict";Qn={MAX_SCAN_FILES:100,MAX_SELECTED:5,MAX_FILE_BYTES:4096,MAX_TOTAL_BYTES:20*1024,MIN_SCORE:.2,HEADER_LINES:10,RECENCY_DAYS:7,RECENCY_BOOST:.15}})... L13: ... L29: Respond ONLY with a JSON array (or empty array [] if nothing worth extracting): L30: [{"text": "...", "category": "personal_fact|preference|event|lesson", "importance": 0.5-0.9, "eventDate": "YYYY-MM-DD or null"}]`});function er(){return{surfacedPaths:new Set,sessi... L31: CREATE TABLE IF NOT EXISTS memories ( ... L187: LIMIT ? L188: `).all(o,n,r).map(s=>({id:s.id,text:s.text,score:Math.min(1,s.fts_score*.1+s.importance*.5),category:s.category,importance:s.importance,metadata:{tags:JSON.parse(s.tags||"[]"),crea... L189: SELECT id, text, category, importance, tags, created_at, access_count, embedding ...
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/index.jsView on unpkg · L1
1var A9=Object.defineProperty;var kM=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof require<"u"?require:e)[n]}):t)(function(t){if(typeof require<"u"... L2: `),l=null;for(let p=0;p<Math.min(c.length,Qn.HEADER_LINES);p++){let m=c[p].trim();if(!(!m||m.startsWith("#")||m.startsWith("---"))){l=m.slice(0,150);break}}let d=Ree(o);return{file... ... L29: Respond ONLY with a JSON array (or empty array [] if nothing worth extracting): L30: [{"text": "...", "category": "personal_fact|preference|event|lesson", "importance": 0.5-0.9, "eventDate": "YYYY-MM-DD or null"}]`});function er(){return{surfacedPaths:new Set,sessi... L31: CREATE TABLE IF NOT EXISTS memories ( ... L417: L418: ${f}`}))}if(c.length===0)return t;let d=[...t],p=-1;for(let m=0;m<d.length;m++)d[m].role==="system"&&(p=m);return d.splice(p+1,0,...c),d}function kv(t,e,n=bv){if(e.size===0)return{... L419: ${t.content}`;for(let r of n.matchAll(Sk)){let o=Rk(r[0]);o&&(t.state.devServerUrls.includes(o)||t.state.devServerUrls.push(o))}if(DY(t.toolName,t.rawArguments,t.content)&&cD(t.con... ... L615: `)}function Rre(){return hv(new ms(oS),new ei(20,_s),new ka(_s))}function ZN(t,e){let n=yv(new ms(oS),
High
Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/index.jsView on unpkg · L1
1Cross-file remote execution chain: dist/index.js spawns dist/cli.js; helper contains network access plus dynamic code execution. L1: var A9=Object.defineProperty;var kM=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof require<"u"?require:e)[n]}):t)(function(t){if(typeof require<"u"... L2: `),l=null;for(let p=0;p<Math.min(c.length,Qn.HEADER_LINES);p++){let m=c[p].trim();if(!(!m||m.startsWith("#")||m.startsWith("---"))){l=m.slice(0,150);break}}let d=Ree(o);return{file... ... L11: L12: `)}var Qn,C0=je(()=>{"use strict";Qn={MAX_SCAN_FILES:100,MAX_SELECTED:5,MAX_FILE_BYTES:4096,MAX_TOTAL_BYTES:20*1024,MIN_SCORE:.2,HEADER_LINES:10,RECENCY_DAYS:7,RECENCY_BOOST:.15}})... L13: ... L29: Respond ONLY with a JSON array (or empty array [] if nothing worth extracting): L30: [{"text": "...", "category": "personal_fact|preference|event|lesson", "importance": 0.5-0.9, "eventDate": "YYYY-MM-DD or null"}]`});function er(){return{surfacedPaths:new Set,sessi... L31: CREATE TABLE IF NOT EXISTS memories ( ... L187: LIMIT ? L188: `).all(o,n,r).map(s=>({id:s.id,text:s.text,score:Math.min(1,s.fts_score*.1+s.importance*.5),category:s.category,importance:s.importance,metadata…
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/index.jsView on unpkg · L1
596L597: Return a brief summary of what you consolidated, updated, or pruned. If nothing changed (memories are already tight), say so.`}var AN=0;async function Hne(t,e={}){let n={..._N,...e... L598: `+S.join(`
Medium
Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L596
1var A9=Object.defineProperty;var kM=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,n)=>(typeof require<"u"?require:e)[n]}):t)(function(t){if(typeof require<"u"... L2: `),l=null;for(let p=0;p<Math.min(c.length,Qn.HEADER_LINES);p++){let m=c[p].trim();if(!(!m||m.startsWith("#")||m.startsWith("---"))){l=m.slice(0,150);break}}let d=Ree(o);return{file... ... L11: L12: `)}var Qn,C0=je(()=>{"use strict";Qn={MAX_SCAN_FILES:100,MAX_SELECTED:5,MAX_FILE_BYTES:4096,MAX_TOTAL_BYTES:20*1024,MIN_SCORE:.2,HEADER_LINES:10,RECENCY_DAYS:7,RECENCY_BOOST:.15}})... L13: ... L29: Respond ONLY with a JSON array (or empty array [] if nothing worth extracting): L30: [{"text": "...", "category": "personal_fact|preference|event|lesson", "importance": 0.5-0.9, "eventDate": "YYYY-MM-DD or null"}]`});function er(){return{surfacedPaths:new Set,sessi... L31: CREATE TABLE IF NOT EXISTS memories ( ... L187: LIMIT ? L188: `).all(o,n,r).map(s=>({id:s.id,text:s.text,score:Math.min(1,s.fts_score*.1+s.importance*.5),category:s.category,importance:s.importance,metadata:{tags:JSON.parse(s.tags||"[]"),crea... L189: SELECT id, text, category, importance, tags, created_at, access_count, embedding ...
Medium
Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/index.jsView on unpkg · L1
dist/qlogicagent.cmdView file
•path = dist/qlogicagent.cmd kind = build_helper sizeBytes = 34 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/qlogicagent.cmdView on unpkg

Findings

7 High6 Medium6 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighRemote Agent Bridgedist/index.js
HighCross File Remote Execution Contextdist/index.js
MediumDynamic Requiredist/index.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/index.js
MediumShips Build Helperdist/qlogicagent.cmd
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
LowNo License