registry / substrate-ai / 0.20.139

substrate-ai@0.20.139

Substrate — multi-agent orchestration daemon for AI coding agents

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 30 file(s), 2.81 MB of source, external domains: ai.google.dev, api.anthropic.com, api.openai.com, claude.ai, docs.dolthub.com, generativelanguage.googleapis.com, git-scm.com, github.com, json-schema.org, json.schemastore.org, raw.githubusercontent.com, registry.npmjs.org

Source & flagged code

8 flagged

dist/health-BXVyiLiL.jsView file

Lines 545-585javascript

545 else if (line.includes("substrate-ai run")) isOrchestrator = true;

546 else if (line.includes("index.js run")) isOrchestrator = true;

547 else if (line.includes("node") && /\srun(\s|$)/.test(line) && (line.includes("substrate") || line.includes("--events") || line.includes("--stories"))) isOrchestrator = true;

548 if (!isOrchestrator) return false;

549 if (projectRoot !== void 0) return line.includes(projectRoot);

550 return true;

551}

552function inspectProcessTree(opts) {

553 const { projectRoot, substrateDirPath, execFileSync: execFileSyncOverride, readFileSync: readFileSyncOverride } = opts ?? {};

554 const result = {

555 orchestrator_pid: null,

556 child_pids: [],

557 zombies: []

558 };

559 try {

560 let psOutput;

561 if (execFileSyncOverride !== void 0) psOutput = execFileSyncOverride("ps", ["-eo", "pid,ppid,stat,command"], {

562 encoding: "utf-8",

563 timeout: 5e3

564 });

565 else {

566 const { execFileSync } = __require("node:child_process");

567 psOutput = execFileSync("ps", ["-eo", "pid,ppid,stat,command"], {

High

Child Process

Package source references child process execution.

dist/health-BXVyiLiL.jsView on unpkg · L565

568 encoding: "utf-8",

569 timeout: 5e3

570 });

571 }

572 const lines = psOutput.split("\n");

573 if (substrateDirPath !== void 0) try {

574 const readFileSyncFn = readFileSyncOverride ?? ((path$1, encoding) => readFileSync(path$1, encoding));

575 const pidContent = readFileSyncFn(join(substrateDirPath, "orchestrator.pid"), "utf-8");

576 const pid = parseInt(pidContent.trim(), 10);

577 if (!isNaN(pid) && pid > 0) {

578 const isAlive = lines.some((line) => {

579 const parts = line.trim().split(/\s+/);

580 if (parts.length < 3) return false;

581 return parseInt(parts[0], 10) === pid && !parts[2].includes("Z");

582 });

583 if (isAlive) result.orchestrator_pid = pid;

584 else result.pid_file_dead = true;

585 }

dist/manifest-read-IvpNQ6Yy.jsView file

Lines 2091-2131javascript

2091 tier = "A";

2092 async run(context) {

2093 const start = Date.now();

2094 const cmd = context.buildCommand !== void 0 ? context.buildCommand :

dist/run-eaZG_3rN.jsView file

16import { accessSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, unwatchFile, watchFile, writeFileSync } from "node:fs... L17: import { exec, execFile, execFileSync, execSync, spawn } from "node:child_process"; L18: import * as path$5 from "node:path"; ... L5700: if (existsSync(profilePath)) try { L5701: const raw = readFileSync(profilePath, "utf-8"); L5702: const parsed = yaml.load(raw); ... L35685: apiKey; L35686: baseUrl; L35687: anthropicVersion; ... L37093: "", L37094: "Available tools:", L37095: "- read_file: Read file contents with optional line range (offset/limit)",

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/run-eaZG_3rN.jsView on unpkg · L16

15656try { L15657: execSync(`npm install ${missingPkg}`, { L15658: cwd: resolvedRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/run-eaZG_3rN.jsView on unpkg · L15656

31646try { L31647: var makeValidate = new Function("self", "RULES", "formats", "root", "refVal", "defaults", "customRules", "equal", "ucs2length", "ValidationError", sourceCode); L31648: validate$1 = makeValidate(self, RULES, formats$2, root, refVal, defaults$2, customRules, equal, ucs2length, ValidationError);

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-eaZG_3rN.jsView on unpkg · L31646

dist/cli/index.jsView file

Lines 1465-1505javascript

1465 chmodSync(statuslinePath, 493);

1466 logger$18.info({ statuslinePath }, "Wrote .claude/statusline.sh");

1467}

1468async function scaffoldClaudeSettings(projectRoot) {

1469 const claudeDir = join(projectRoot, ".claude");

dist/dist-BWCudDcl.jsView file

Lines 1-23javascript

1import { join, resolve } from "path";

2import { access, mkdir, readFile, writeFile } from "fs/promises";

3import { EventEmitter } from "node:events";

4import yaml, { dump, load } from "js-yaml";

5import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

dist/cli/templates/statusline.shView file

•path = dist/cli/templates/statusline.sh kind = build_helper sizeBytes = 565 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cli/templates/statusline.shView on unpkg

Source & flagged code

8 flagged · loading source

dist/health-BXVyiLiL.jsView file

565else { L566: const { execFileSync } = __require("node:child_process"); L567: psOutput = execFileSync("ps", ["-eo", "pid,ppid,stat,command"], {

High

Child Process

Package source references child process execution.

dist/health-BXVyiLiL.jsView on unpkg · L565

dist/manifest-read-IvpNQ6Yy.jsView file

2111detached: true, L2112: shell: true, L2113: stdio: [

High

Shell

Package source references shell execution.

dist/manifest-read-IvpNQ6Yy.jsView on unpkg · L2111

dist/run-eaZG_3rN.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/run-eaZG_3rN.jsView on unpkg · L16

15656try { L15657: execSync(`npm install ${missingPkg}`, { L15658: cwd: resolvedRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/run-eaZG_3rN.jsView on unpkg · L15656

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-eaZG_3rN.jsView on unpkg · L31646

dist/cli/index.jsView file

1485try { L1486: const _require = createRequire(join(fromDir, "synthetic.js")); L1487: const pkgJsonPath = _require.resolve("bmad-method/package.json");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/index.jsView on unpkg · L1485

dist/dist-BWCudDcl.jsView file

3package = substrate-ai; repositoryIdentity = substrate; dependency = js-yaml L3: import { EventEmitter } from "node:events"; L4: import yaml, { dump, load } from "js-yaml"; L5: import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/dist-BWCudDcl.jsView on unpkg · L3

dist/cli/templates/statusline.shView file

•path = dist/cli/templates/statusline.sh kind = build_helper sizeBytes = 565 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cli/templates/statusline.shView on unpkg

Findings

5 High5 Medium5 Low

HighChild Processdist/health-BXVyiLiL.js

HighShelldist/manifest-read-IvpNQ6Yy.js

HighRemote Agent Bridgedist/run-eaZG_3rN.js

HighCopied Package Dependency Bridgedist/dist-BWCudDcl.js

HighRuntime Package Installdist/run-eaZG_3rN.js

MediumDynamic Requiredist/cli/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/cli/templates/statusline.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/run-eaZG_3rN.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

dist/health-BXVyiLiL.jsView file

Lines 545-585javascript

545 else if (line.includes("substrate-ai run")) isOrchestrator = true;

546 else if (line.includes("index.js run")) isOrchestrator = true;

547 else if (line.includes("node") && /\srun(\s|$)/.test(line) && (line.includes("substrate") || line.includes("--events") || line.includes("--stories"))) isOrchestrator = true;

548 if (!isOrchestrator) return false;

549 if (projectRoot !== void 0) return line.includes(projectRoot);

550 return true;

551}

552function inspectProcessTree(opts) {

553 const { projectRoot, substrateDirPath, execFileSync: execFileSyncOverride, readFileSync: readFileSyncOverride } = opts ?? {};

554 const result = {

555 orchestrator_pid: null,

556 child_pids: [],

557 zombies: []

558 };

559 try {

560 let psOutput;

561 if (execFileSyncOverride !== void 0) psOutput = execFileSyncOverride("ps", ["-eo", "pid,ppid,stat,command"], {

562 encoding: "utf-8",

563 timeout: 5e3

564 });

565 else {

566 const { execFileSync } = __require("node:child_process");

567 psOutput = execFileSync("ps", ["-eo", "pid,ppid,stat,command"], {

High

Child Process

Package source references child process execution.

dist/health-BXVyiLiL.jsView on unpkg · L565

568 encoding: "utf-8",

569 timeout: 5e3

570 });

571 }

572 const lines = psOutput.split("\n");

573 if (substrateDirPath !== void 0) try {

574 const readFileSyncFn = readFileSyncOverride ?? ((path$1, encoding) => readFileSync(path$1, encoding));

575 const pidContent = readFileSyncFn(join(substrateDirPath, "orchestrator.pid"), "utf-8");

576 const pid = parseInt(pidContent.trim(), 10);

577 if (!isNaN(pid) && pid > 0) {

578 const isAlive = lines.some((line) => {

579 const parts = line.trim().split(/\s+/);

580 if (parts.length < 3) return false;

581 return parseInt(parts[0], 10) === pid && !parts[2].includes("Z");

582 });

583 if (isAlive) result.orchestrator_pid = pid;

584 else result.pid_file_dead = true;

585 }

dist/manifest-read-IvpNQ6Yy.jsView file

Lines 2091-2131javascript

2091 tier = "A";

2092 async run(context) {

2093 const start = Date.now();

2094 const cmd = context.buildCommand !== void 0 ? context.buildCommand :

dist/run-eaZG_3rN.jsView file

High

Remote Agent Bridge

Source exposes local file and command tools to a remote model endpoint.

dist/run-eaZG_3rN.jsView on unpkg · L16

15656try { L15657: execSync(`npm install ${missingPkg}`, { L15658: cwd: resolvedRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/run-eaZG_3rN.jsView on unpkg · L15656

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/run-eaZG_3rN.jsView on unpkg · L31646

dist/cli/index.jsView file

Lines 1465-1505javascript

1465 chmodSync(statuslinePath, 493);

1466 logger$18.info({ statuslinePath }, "Wrote .claude/statusline.sh");

1467}

1468async function scaffoldClaudeSettings(projectRoot) {

1469 const claudeDir = join(projectRoot, ".claude");

dist/dist-BWCudDcl.jsView file

Lines 1-23javascript

1import { join, resolve } from "path";

2import { access, mkdir, readFile, writeFile } from "fs/promises";

3import { EventEmitter } from "node:events";

4import yaml, { dump, load } from "js-yaml";

5import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

dist/cli/templates/statusline.shView file

•path = dist/cli/templates/statusline.sh kind = build_helper sizeBytes = 565 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cli/templates/statusline.shView on unpkg