scaffold-agent: Suspicious npm security report (Warn)

Loading npm security reports…

scaffold-agent: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

7 flagged

dist/cli.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

3// src/cli.ts

4import { join as join4, dirname as dirname2, resolve as resolve2 } from "path";

5import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";

6import { fileURLToPath as fileURLToPath2 } from "url";

7import { spawn } from "child_process";

8import chalk3 from "chalk";

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L6

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L6

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L6

9import ora from "ora";

11// src/cli-argv.ts

12import { parseArgs } from "util";

13var SECRETS = ["oneclaw", "encrypted", "none"];

14var LLM = ["oneclaw", "gemini", "openai", "anthropic"];

15var SHROUD_UPSTREAM = [

16 "openai",

17 "anthropic",

18 "google",

19 "gemini",

20 "mistral",

21 "cohere",

22 "openrouter",

23 "darkbloom",

24 "venice"

25];

26var SHROUD_BILLING = [

Lines 2002-2042javascript

2002]);

2003

2004const gen = spawnSync(process.execPath, ["scripts/generate-abi-types.mjs"], {

2005 cwd: root,

2006 stdio: "inherit",

2007 env: process.env,

2008});

2009if (gen.status !==

Lines 2380-2420javascript

2380function getGenerateDeployerScript() {

2381 return `#!/usr/bin/env node

2382import { readFileSync, writeFileSync, existsSync } from "fs";

2383import { join } from "path";

2384import {

2385 decryptSecretsFile,

2386 loadPublicEnvFile,

2387 promptSecretsPassword,

2388 saveSecretsFile,

2389 upsertEnvLine,

Lines 3428-3468javascript

3428 const bytes = randomBytes(len);

3429 let out = "";

3430 for (let i = 0; i < len; i++) out +=

Lines 10965-11005javascript

10965 const exitCode = await new Promise((resolve3) => {

10966 const child = spawn("npm", ["install"], {

Source & flagged code

7 flagged · loading source

dist/cli.jsView file

6import { fileURLToPath as fileURLToPath2 } from "url"; L7: import { spawn } from "child_process"; L8: import chalk3 from "chalk"; ... L252: import { isAddress } from "viem"; L253: import { generatePrivateKey, privateKeyToAccount } from "viem/accounts"; L254: function isValidEthAddress(val) { ... L508: const sessionKeyPrivateKey = await password({ L509: message: "Session key private key (0x..., for AGENT_PRIVATE_KEY):", L510: mask: "*", ... L788: try { L789: raw = JSON.parse(readFileSync(abs, "utf8")); L790: } catch (e) {

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L6

6Trigger-reachable chain: manifest.bin -> dist/cli.js L6: import { fileURLToPath as fileURLToPath2 } from "url"; L7: import { spawn } from "child_process"; L8: import chalk3 from "chalk"; ... L252: import { isAddress } from "viem"; L253: import { generatePrivateKey, privateKeyToAccount } from "viem/accounts"; L254: function isValidEthAddress(val) { ... L508: const sessionKeyPrivateKey = await password({ L509: message: "Session key private key (0x..., for AGENT_PRIVATE_KEY):", L510: mask: "*", ... L788: try { L789: raw = JSON.parse(readFileSync(abs, "utf8")); L790: } catch (e) {

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L6

6import { fileURLToPath as fileURLToPath2 } from "url"; L7: import { spawn } from "child_process"; L8: import chalk3 from "chalk";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L6

3448stdio: "pipe", L3449: shell: true, L3450: timeout: 30_000,

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L3448

10985} L10986: if (chain !== "none" && process.env.SCAFFOLD_SKIP_AUTO_FUND !== "1" && !w.skipAutoFund) { L10987: const fundScript = join4(projectDir, "scripts", "fund-deployer.mjs"); ... L10989: await new Promise((resolve3) => { L10990: const child = spawn(process.execPath, ["scripts/fund-deployer.mjs"], { L10991: cwd: projectDir, ... L10997: info( L10998: "Auto-fund only works if a node is already running on your RPC (default http://127.0.0.1:8545). Start just chain first, then: cd " + projectName + " && just fund \u2192 just deploy... L10999: );

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L10985

2022L2023: let r = spawnSync("npx", ["hardhat", "deploy", "--network", network], { L2024: cwd: hh,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L2022

2400try { L2401: const { fundLocalAddresses } = await import("./fund-deployer.mjs"); L2402: const pub = loadPublicEnvFile(ENV_PATH);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli.jsView on unpkg · L2400

Source & flagged code

7 flagged

dist/cli.jsView file

Lines 1-26javascript

1#!/usr/bin/env node

3// src/cli.ts

4import { join as join4, dirname as dirname2, resolve as resolve2 } from "path";

5import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";

6import { fileURLToPath as fileURLToPath2 } from "url";

7import { spawn } from "child_process";

8import chalk3 from "chalk";

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

dist/cli.jsView on unpkg · L6

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/cli.jsView on unpkg · L6

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L6

9import ora from "ora";

11// src/cli-argv.ts

12import { parseArgs } from "util";

13var SECRETS = ["oneclaw", "encrypted", "none"];

14var LLM = ["oneclaw", "gemini", "openai", "anthropic"];

15var SHROUD_UPSTREAM = [

16 "openai",

17 "anthropic",

18 "google",

19 "gemini",

20 "mistral",

21 "cohere",

22 "openrouter",

23 "darkbloom",

24 "venice"

25];

26var SHROUD_BILLING = [

Lines 2002-2042javascript

2002]);

2003

2004const gen = spawnSync(process.execPath, ["scripts/generate-abi-types.mjs"], {

2005 cwd: root,

2006 stdio: "inherit",

2007 env: process.env,

2008});

2009if (gen.status !==

Lines 2380-2420javascript

2380function getGenerateDeployerScript() {

2381 return `#!/usr/bin/env node

2382import { readFileSync, writeFileSync, existsSync } from "fs";

2383import { join } from "path";

2384import {

2385 decryptSecretsFile,

2386 loadPublicEnvFile,

2387 promptSecretsPassword,

2388 saveSecretsFile,

2389 upsertEnvLine,

Lines 3428-3468javascript

3428 const bytes = randomBytes(len);

3429 let out = "";

3430 for (let i = 0; i < len; i++) out +=

Lines 10965-11005javascript

10965 const exitCode = await new Promise((resolve3) => {

10966 const child = spawn("npm", ["install"], {

scaffold-agent@0.1.33

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code