registry / synapse-hub / 2.2.3
synapse-hub@2.2.3
Phien ban cu da duoc thu hoi. Vui long nang cap len synapse-hub@3.0.1 de su dung day du 51 skills va cac ban va bao mat moi nhat.
Enterprise AI Agent Intelligence Hub & Autonomous Skill Network
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe launcher dispatches user-selected commands to the bundled CLI, with no install hook or concealed payload behavior identified. The default update check contacts the package’s own npm and GitHub locations for version metadata only.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes a CLI command other than `version`, `update`, or `mcp-serve`.
Impact
The source indicates version-check traffic and a local cache write; it does not show host, user, project, or credential data being sent.
Mechanism
The update checker requests the latest package version from the npm registry, with a GitHub raw package manifest fallback, and caches the result locally.
AI rationale
The launcher dispatches user-selected commands to the bundled CLI, with no install hook or concealed payload behavior identified. The default update check contacts the package’s own npm and GitHub locations for version metadata only.
Evidence
~/.agent_memory/update_cache.json
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest routes CLI commands through `bin/agent-qa.js` and declares no install lifecycle script.
- The launcher forwards the user-supplied arguments to the package’s local Python CLI.
- The flagged AWS and request patterns in `tools/skillspector.py` are scanner regex definitions; no credential collection or outbound request behavior was found there.
- The flagged shell helper searches local JUnit reports and screenshots and prints triage information.
- The CLI’s automatic update check retrieves package-version metadata from the package’s npm and GitHub locations.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemShell
UrlStrings
Source & flagged code
7 flaggedbin/agent-qa.jsView file
3// SPDX-License-Identifier: MIT
L4: // Project: Synapse-Hub (https://github.com/TeeVee998/Synapse-Hub)
L5:
...
L12:
L13: const { spawn, execSync } = require('child_process');
L14: const path = require('path');
...
L16:
L17: const REPO_ROOT = path.resolve(__dirname, '..');
L18: const CLI_PATH = path.join(REPO_ROOT, 'tools', 'cli.py');
...
L31: function resolvePython() {
L32: const candidates = process.platform === 'win32'
L33: ? ['python', 'py', 'python3']
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/agent-qa.jsView on unpkg · L369const args = [CLI_PATH, ...process.argv.slice(2)];
// Spawn child Python process inheriting standard IO
const child = spawn(python.command, args, {
stdio: 'inherit',
env: { ...process.env, AGENT_QA_INVOKER: 'npm' }
});
child.on('error', (er
Low
Ai Review Evidence
The launcher forwards the user-supplied arguments to the package’s local Python CLI.
bin/agent-qa.jsView on unpkg · L69tools/tms_sync_bridge.pyView file
Findings
2 High3 Medium7 Low
HighSandbox Evasion Gated Capabilitybin/agent-qa.js
HighPayload In Excluded Dir.agents/skills/failure-autopsy-and-healing/scripts/triage_failures.sh
MediumEnvironment Vars
MediumShips Build Helpertools/tms_sync_bridge.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencebin/agent-qa.js
LowAi Review Evidencetools/skillspector.py
Affected versions and remediation
This report applies to synapse-hub@2.2.3.
See all versions of synapse-hub for other recorded verdicts.
- Review the evidence and your use of synapse-hub@2.2.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.