registry / synapse-hub / 2.7.0
synapse-hub@2.7.0
Phien ban cu da duoc thu hoi. Vui long nang cap len synapse-hub@3.0.1 de su dung day du 51 skills va cac ban va bao mat moi nhat.
Enterprise AI Agent Intelligence Hub & Autonomous Skill Network
AI Security Review
scanned 16h ago · by lpm-firewall-aiThe package exposes a Python-backed CLI whose launcher runs only when invoked directly. The flagged download and credential indicators are scanner rules, while the default network activity checked here retrieves package update metadata from the project’s registry and repository.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when invoked; update metadata is checked for ordinary commands unless quiet mode is enabled.
Impact
No credential collection, unrelated data transfer, or harmful automatic action was identified in the inspected paths.
Mechanism
The launcher spawns the bundled Python CLI. The update check fetches version metadata from the npm registry or the project’s GitHub raw package.json.
AI rationale
The package exposes a Python-backed CLI whose launcher runs only when invoked directly. The flagged download and credential indicators are scanner rules, while the default network activity checked here retrieves package update metadata from the project’s registry and repository.
Evidence
package.jsonbin/agent-qa.jstools/cli.pytools/update_sentinel.pytools/skillspector.py.agents/skills/playwright-webapp-testing/examples/server_lifecycle_playwright.py
Network endpoints2
registry.npmjs.orgraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package entry point is a CLI launcher; importing it only exports resolvePython without starting the CLI.
- When invoked, the launcher passes CLI arguments to the bundled Python tool and inherits standard input/output.
- The CLI’s default update check is a cached version notification; it requests version metadata from the npm registry or the project’s GitHub raw package.json.
- The reported download-and-run and credential indicators in skillspector.py are scanner patterns, not code that downloads scripts or reads AWS credentials.
Evidence against
- The launcher invokes Python when run directly, which is expected for this package’s CLI.
- The CLI checks for updates on ordinary commands unless quiet mode is enabled, but the check targets package update metadata.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedbin/agent-qa.jsView file
3// SPDX-License-Identifier: MIT
L4: // Project: Synapse-Hub (https://github.com/TeeVee998/Synapse-Hub)
L5:
...
L12:
L13: const { spawn, execFileSync } = require('child_process');
L14: const path = require('path');
...
L16:
L17: const REPO_ROOT = path.resolve(__dirname, '..');
L18: const CLI_PATH = path.join(REPO_ROOT, 'tools', 'cli.py');
...
L31: function resolvePython() {
L32: const candidates = process.platform === 'win32'
L33: ? ['python', 'py', 'python3']
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
bin/agent-qa.jsView on unpkg · L380// Spawn child Python process inheriting standard IO
const child = spawn(python.command, args, {
stdio: 'inherit',
env: { ...process.env, AGENT_QA_INV
Low
Ai Review Evidence
When invoked, the launcher passes CLI arguments to the bundled Python tool and inherits standard input/output.
bin/agent-qa.jsView on unpkg · L80103if (require.main === module) {
main();
} else {
module.exports = { resolvePython };
}
Low
Ai Review Evidence
Findings
2 High3 Medium7 Low
HighSandbox Evasion Gated Capabilitybin/agent-qa.js
HighPayload In Excluded Dir.agents/skills/playwright-webapp-testing/examples/server_lifecycle_playwright.py
MediumEnvironment Vars
MediumShips Build Helpertools/tms_sync_bridge.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
LowAi Review Evidencebin/agent-qa.js
LowAi Review Evidencebin/agent-qa.js
Affected versions and remediation
This report applies to synapse-hub@2.7.0.
See all versions of synapse-hub for other recorded verdicts.
- Review the evidence and your use of synapse-hub@2.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.