synapse-hub@2.2.0
Phien ban cu da duoc thu hoi. Vui long nang cap len synapse-hub@3.0.1 de su dung day du 51 skills va cac ban va bao mat moi nhat.
Enterprise AI Agent Intelligence Hub & Autonomous Skill Network
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe package automatically contacts update hosts during most CLI invocations without documenting the check or providing a clear opt-out, so this is suspicious runtime telemetry. The observed request is limited to package version lookup; the scanner and triage findings are benign for the package’s stated purpose.
Static reason
One or more suspicious static signals were detected.
Trigger
Invoking most CLI subcommands, then again when the 24-hour update cache expires.
Impact
The request reveals that a client is checking this package to the contacted service. It does not transmit credentials or project data; the automatic check lacks a disclosed opt-out.
Mechanism
The CLI fetches the package’s latest version from the npm registry, with a GitHub raw package.json fallback, using a fixed package User-Agent. It caches the response outside the package.
AI rationale
The package automatically contacts update hosts during most CLI invocations without documenting the check or providing a clear opt-out, so this is suspicious runtime telemetry. The observed request is limited to package version lookup; the scanner and triage findings are benign for the package’s stated purpose.
Evidence
tools/cli.pytools/update_sentinel.py~/.agent_memory/update_cache.json
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package’s main and executable entry points route to the launcher, which starts the Python CLI when invoked.
- On most CLI commands, the CLI calls the update checker by default; it skips only update, mcp-serve and version.
- The checker sends a fixed User-Agent request to the npm registry and falls back to the publisher’s GitHub raw package.json to fetch version metadata.
- The update checker stores its cache at ~/.agent_memory/update_cache.json.
- The flagged triage script reads local JUnit reports and lists local failure screenshots.
Evidence against
- The manifest has no install lifecycle scripts; the network lookup occurs during CLI use.
- The update lookup requests package version metadata and does not read or send user credentials or project data.
- The flagged SkillSpector matches are scanner patterns and local file-reading logic, not credential transmission to GitHub.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
Source & flagged code
7 flaggedbin/agent-qa.jsView file
8L9: const { spawn, execSync } = require('child_process');
L10: const path = require('path');
...
L12:
L13: const REPO_ROOT = path.resolve(__dirname, '..');
L14: const CLI_PATH = path.join(REPO_ROOT, 'tools', 'cli.py');
...
L27: function resolvePython() {
L28: const candidates = process.platform === 'win32'
L29: ? ['python', 'py', 'python3']
...
L55: console.error(`Neither ${CYAN}python3${RESET} nor ${CYAN}python${RESET} (>= 3.9) was found on your PATH.`);
L56: console.error(`👉 Please install Python from: ${BOLD}https://www.python.org/downloads/${RESET}\n`);
L57: process.exit(1);
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/agent-qa.jsView on unpkg · L8tools/tms_sync_bridge.pyView file
•path = tools/tms_sync_bridge.py
kind = build_helper
sizeBytes = 15309
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
tools/tms_sync_bridge.pyView on unpkgFindings
2 High7 Medium3 Low
HighSandbox Evasion Gated Capabilitybin/agent-qa.js
HighPayload In Excluded Dir.agents/skills/failure-autopsy-and-healing/scripts/triage_failures.sh
MediumEnvironment Vars
MediumShips Build Helpertools/tms_sync_bridge.py
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidencetools/cli.py
MediumAi Review Evidencetools/update_sentinel.py
MediumAi Review Evidencetools/update_sentinel.py
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to synapse-hub@2.2.0.
See all versions of synapse-hub for other recorded verdicts.
- Review the evidence and your use of synapse-hub@2.2.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.