registry / tower-mcp / 0.7.1

tower-mcp@0.7.1

Air-traffic control for AI agents editing a shared repo — semantic pre-flight collision detection over MCP. Model-agnostic (Claude Code, Cursor, Codex).

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 297 KB of source, external domains: github.com, nodejs.org

Source & flagged code

3 flagged

dist/worker.jsView file

Lines 1-29javascript

1import { execFile } from "node:child_process";

2import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

3import { join } from "node:path";

4import { TOWER_VERSION } from "@tower/shared";

5import { remoteConfig, withRemote } from "./remote.js";

6import { buildService } from "./lib.js";

7/** execFile-based Exec that never throws: captures stdout+stderr, exit code, timeouts. */

8export const defaultExec = (cmd, args, opts) => new Promise((resolve) => {

9 // Own the timeout instead of using execFile's: with shell:true the direct child is

10 // cmd.exe/sh, and on Windows killing only it orphans the actual agent — which keeps

11 // editing files after our git reset and holds the stdio pipes open (so the callback

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L9

12 // would never fire). taskkill /T reaches the whole tree. Owning the flag also stops

13 // a maxBuffer kill from being misreported as a timeout.

14 let timedOut = false;

15 let timer;

16 const child = execFile(cmd, args, {

17 cwd: opts.cwd,

18 // Agent CLIs (`claude`, `codex`) are .cmd shims on Windows; Node refuses to spawn

19 // .cmd without a shell (CVE-2024-27980), so runners set shell:true. Their args are

20 // all static — the untrusted prompt goes via stdin, never the command line.

21 ...(opts.shell ? { shell: true } : {}),

22 // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

23 windowsVerbatimArguments: cmd === "cmd",

24 maxBuffer: 10 * 1024 * 1024,

25 }, (err, stdout, stderr) => {

26 if (timer)

27 clearTimeout(timer);

28 const out = `${stdout ?? ""}${stderr ?? ""}`;

29 if (!err)

dist/index.jsView file

Lines 2748-2788javascript

2748 const claims = service.listClaims({ status: "active" }).claims;

2749 out(renderClaimsTable(claims));

2750 service.store.close();

2751}

2752function resolvePort(argPort, env = process.env) {

Source & flagged code

3 flagged · loading source

dist/worker.jsView file

1import { execFile } from "node:child_process"; L2: import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

9// Own the timeout instead of using execFile's: with shell:true the direct child is L10: // cmd.exe/sh, and on Windows killing only it orphans the actual agent — which keeps L11: // editing files after our git reset and holds the stdio pipes open (so the callback

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L9

dist/index.jsView file

2768server.on("close", () => service.store.close()); L2769: log(`Tower listening on http://${host}:${port}/mcp${token ? " (token required)" : ""}`); L2770: log(`Live board: http://${host}:${port}/board`); ... L2779: } L2780: function gitDefaults(cwd, env = process.env) { L2781: const git = (cmd) => { L2782: try { L2783: return execSync(cmd, { cwd, stdio: ["ignore", "pipe", "ignore"] }).toString().trim(); L2784: } catch {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2768

Findings

3 High2 Medium4 Low

HighChild Processdist/worker.js

HighShelldist/worker.js

HighSame File Env Network Executiondist/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/worker.jsView file

Lines 1-29javascript

1import { execFile } from "node:child_process";

2import { existsSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

3import { join } from "node:path";

4import { TOWER_VERSION } from "@tower/shared";

5import { remoteConfig, withRemote } from "./remote.js";

6import { buildService } from "./lib.js";

7/** execFile-based Exec that never throws: captures stdout+stderr, exit code, timeouts. */

8export const defaultExec = (cmd, args, opts) => new Promise((resolve) => {

9 // Own the timeout instead of using execFile's: with shell:true the direct child is

10 // cmd.exe/sh, and on Windows killing only it orphans the actual agent — which keeps

11 // editing files after our git reset and holds the stdio pipes open (so the callback

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L9

12 // would never fire). taskkill /T reaches the whole tree. Owning the flag also stops

13 // a maxBuffer kill from being misreported as a timeout.

14 let timedOut = false;

15 let timer;

16 const child = execFile(cmd, args, {

17 cwd: opts.cwd,

18 // Agent CLIs (`claude`, `codex`) are .cmd shims on Windows; Node refuses to spawn

19 // .cmd without a shell (CVE-2024-27980), so runners set shell:true. Their args are

20 // all static — the untrusted prompt goes via stdin, never the command line.

21 ...(opts.shell ? { shell: true } : {}),

22 // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

23 windowsVerbatimArguments: cmd === "cmd",

24 maxBuffer: 10 * 1024 * 1024,

25 }, (err, stdout, stderr) => {

26 if (timer)

27 clearTimeout(timer);

28 const out = `${stdout ?? ""}${stderr ?? ""}`;

29 if (!err)

dist/index.jsView file

Lines 2748-2788javascript

2748 const claims = service.listClaims({ status: "active" }).claims;

2749 out(renderClaimsTable(claims));

2750 service.store.close();

2751}

2752function resolvePort(argPort, env = process.env) {