registry / taleseal / 0.1.1

taleseal@0.1.1

Seal an agent run as a shareable tale — taleseal CLI

Static Scan Results

scanned 7h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 25 file(s), 151 KB of source, external domains: 127.0.0.1, api.example.com, env.test, example.com, example.test, stored.test, taleseal.com

Source & flagged code

7 flagged

src/gate.test.tsView file

Lines 14-54typescript

14describe("buildRedactionReport", () => {

15 test("counts every marker by kind across the whole tale", () => {

16 const report = buildRedactionReport(leakyTale);

17 expect(report.total).toBeGreaterThanOrEqual(2);

18 expect(report.counts["api-key"]).toBeGreaterThanOrEqual(1);

19 expect(report.counts["aws-access-key"]).toBeGreaterThanOrEqual(1);

20 expect(Object.values(report.counts).reduce((a, b) => a + b, 0)).toBe(report.total);

21 });

23 test("keeps at most three samples, each showing the marker in redacted context", () => {

24 const report = buildRedactionReport(leakyTale);

25 expect(report.samples.length).toBeLessThanOrEqual(3);

26 expect(report.samples.length).toBeGreaterThan(0);

27 for (const sample of report.samples) {

28 expect(sample.context).toContain(`[REDACTED:${sample.kind}]`);

29 // context is the marker plus ~40 chars of surroundings (and ellipses)

30 expect(sample.context.length).toBeLessThanOrEqual(`[REDACTED:${sample.kind}]`.length + 60);

31 }

32 const serialised = JSON.stringify(report);

33 expect(serialised).not.toContain("sk-synthetic");

34 expect(serialised).not.toContain("AKIAAAAABBBBCCCCDDDD");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/gate.test.tsView on unpkg · L34

Critical

Secret Pattern

AWS access key ID in src/gate.test.ts

src/gate.test.tsView on unpkg · L34

35 });

37 test("a clean tale reports zero", () => {

38 const clean = composeTale({

39 agent: "claude-code",

40 runId: "clean-run",

41 userMessages: ["Say hello."],

42 steps: [{ assistantText: "Hello! Nothing sensitive happened here at all today.", toolCalls: [] }],

43 });

44 expect(buildRedactionReport(clean)).toEqual({ total: 0, counts: {}, samples: [] });

45 });

46});

48describe("decideGate", () => {

49 test("--yes publishes without a prompt, TTY or not", () => {

50 expect(decideGate({ yes: true, tty: false })).toEqual({ action: "publish" });

51 expect(decideGate({ yes: true, tty: true })).toEqual({ action: "publish" });

52 });

54 test("a TTY without --yes gets the interactive prompt", () => {

src/redact.test.tsView file

Lines 1-57typescript

1import { describe, expect, test } from "bun:test";

2import { redact, redactRun } from "./redact";

4describe("redact", () => {

5 test("AWS access keys", () => {

6 expect(redact("key AKIAAAAABBBBCCCCDDDD in output"

src/compose.test.tsView file

Lines 83-123typescript

83 expect(first?.kind === "test" && first.output).toContain("3 pass, 2 fail");

84 });

86 test("the Edit call becomes one aggregated diff evidence", () => {

87 expect(tale.beats[1]?.evidence).toEqual([

88 {

Source & flagged code

7 flagged · loading source

src/gate.test.tsView file

34patternName = aws_access_key severity = critical line = 34 matchedText = expect(s...D");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/gate.test.tsView on unpkg · L34

34patternName = aws_access_key severity = critical line = 34 matchedText = expect(s...D");

Critical

Secret Pattern

AWS access key ID in src/gate.test.ts

src/gate.test.tsView on unpkg · L34

src/redact.test.tsView file

6patternName = aws_access_key severity = critical line = 6 matchedText = expect(r...t");

Critical

Secret Pattern

AWS access key ID in src/redact.test.ts

src/redact.test.tsView on unpkg · L6

37patternName = private_key_rsa severity = critical line = 37 matchedText = const pe...--";

Critical

Secret Pattern

RSA private key in src/redact.test.ts

src/redact.test.tsView on unpkg · L37

90patternName = aws_access_key severity = critical line = 90 matchedText = userMess...e"],

Critical

Secret Pattern

AWS access key ID in src/redact.test.ts

src/redact.test.tsView on unpkg · L90

107patternName = aws_access_key severity = critical line = 107 matchedText = expect(J...f/);

Critical

Secret Pattern

AWS access key ID in src/redact.test.ts

src/redact.test.tsView on unpkg · L107

src/compose.test.tsView file

103patternName = aws_access_key severity = critical line = 103 matchedText = expect(s...D");

Critical

Secret Pattern

AWS access key ID in src/compose.test.ts

src/compose.test.tsView on unpkg · L103

Findings

7 Critical2 Medium4 Low

CriticalCritical Secretsrc/gate.test.ts

CriticalSecret Patternsrc/gate.test.ts

CriticalSecret Patternsrc/redact.test.ts

CriticalSecret Patternsrc/compose.test.ts

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

src/gate.test.tsView file

Lines 14-54typescript

14describe("buildRedactionReport", () => {

15 test("counts every marker by kind across the whole tale", () => {

16 const report = buildRedactionReport(leakyTale);

17 expect(report.total).toBeGreaterThanOrEqual(2);

18 expect(report.counts["api-key"]).toBeGreaterThanOrEqual(1);

19 expect(report.counts["aws-access-key"]).toBeGreaterThanOrEqual(1);

20 expect(Object.values(report.counts).reduce((a, b) => a + b, 0)).toBe(report.total);

21 });

23 test("keeps at most three samples, each showing the marker in redacted context", () => {

24 const report = buildRedactionReport(leakyTale);

25 expect(report.samples.length).toBeLessThanOrEqual(3);

26 expect(report.samples.length).toBeGreaterThan(0);

27 for (const sample of report.samples) {

28 expect(sample.context).toContain(`[REDACTED:${sample.kind}]`);

29 // context is the marker plus ~40 chars of surroundings (and ellipses)

30 expect(sample.context.length).toBeLessThanOrEqual(`[REDACTED:${sample.kind}]`.length + 60);

31 }

32 const serialised = JSON.stringify(report);

33 expect(serialised).not.toContain("sk-synthetic");

34 expect(serialised).not.toContain("AKIAAAAABBBBCCCCDDDD");

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/gate.test.tsView on unpkg · L34

Critical

Secret Pattern

AWS access key ID in src/gate.test.ts

src/gate.test.tsView on unpkg · L34

35 });

37 test("a clean tale reports zero", () => {

38 const clean = composeTale({

39 agent: "claude-code",

40 runId: "clean-run",

41 userMessages: ["Say hello."],

42 steps: [{ assistantText: "Hello! Nothing sensitive happened here at all today.", toolCalls: [] }],

43 });

44 expect(buildRedactionReport(clean)).toEqual({ total: 0, counts: {}, samples: [] });

45 });

46});

48describe("decideGate", () => {

49 test("--yes publishes without a prompt, TTY or not", () => {

50 expect(decideGate({ yes: true, tty: false })).toEqual({ action: "publish" });

51 expect(decideGate({ yes: true, tty: true })).toEqual({ action: "publish" });

52 });

54 test("a TTY without --yes gets the interactive prompt", () => {

src/redact.test.tsView file

Lines 1-57typescript

1import { describe, expect, test } from "bun:test";

2import { redact, redactRun } from "./redact";

4describe("redact", () => {

5 test("AWS access keys", () => {

6 expect(redact("key AKIAAAAABBBBCCCCDDDD in output"

src/compose.test.tsView file

Lines 83-123typescript

83 expect(first?.kind === "test" && first.output).toContain("3 pass, 2 fail");

84 });

86 test("the Edit call becomes one aggregated diff evidence", () => {

87 expect(tale.beats[1]?.evidence).toEqual([

88 {

Lines 70-110typescript

70 // the password dies, the host stays — which is what a reader needs to see anyway.

71 expect(redact("DATABASE_URL=postgres://u:p4ss@host:5432/x")).toBe(

72 "DATABASE_URL=postgres://u:[REDACTED:connection-password]@host:5432/x",

73 );

74 });

76 test("no false positives on prose", () => {

77 const prose =

78 "The token budget was fine; we discussed the secret to good tests and the password policy. Skip the risky bits.";

79 expect(redact(prose)).toBe(prose);

80 expect(redact("The AKIA prefix marks AWS keys")).toBe("The AKIA prefix marks AWS keys");

81 expect(redact("Bearer of good news")).toBe("Bearer of good news");

82 });

83});

85describe("redactRun", () => {

86 test("scrubs every string field of the run", () => {

87 const run = redactRun({

88 agent: "claude-code",

89 runId: "run-1",

90 userMessages: ["use AKIAAAAABBBBCCCCDDDD please"],

Critical

Secret Pattern

AWS access key ID in src/redact.test.ts

src/redact.test.tsView on unpkg · L90

91 steps: [

92 {

93 assistantText: "found ghp_abcdefghijklmnopqrst123456",

94 toolCalls: [

95 {

96 name: "Bash",

97 inputSummary: "password=hunter2",

98 outputSummary: "xoxb-1234567890-abcdefgh",

99 command: "curl -H 'authorization: Bearer tsk_live_0123456789abcdef' https://api.example.com",

100 files: ["/home/dev/secret=hunter2.txt"],

101 url: "https://example.com/?token=deadbeef",

102 },

103 ],

104 },

105 ],

106 });

Critical

Secret Pattern

AWS access key ID in src/redact.test.ts

src/redact.test.tsView on unpkg · L107

108 });

109});

110