registry / tower-mcp / 0.5.0

tower-mcp@0.5.0

Air-traffic control for AI agents editing a shared repo — semantic pre-flight collision detection over MCP. Model-agnostic (Claude Code, Cursor, Codex).

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 185 KB of source

Source & flagged code

3 flagged

dist/worker.jsView file

Lines 1-28javascript

1import { execFile } from "node:child_process";

2import { remoteConfig, withRemote } from "./remote.js";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

3import { buildService } from "./lib.js";

4/** execFile-based Exec that never throws: captures stdout+stderr, exit code, timeouts. */

5export const defaultExec = (cmd, args, opts) => new Promise((resolve) => {

6 execFile(cmd, args, {

7 cwd: opts.cwd,

8 ...(opts.timeoutMs ? { timeout: opts.timeoutMs, killSignal: "SIGKILL" } : {}),

9 // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

10 windowsVerbatimArguments: cmd === "cmd",

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L8

11 maxBuffer: 10 * 1024 * 1024,

12 }, (err, stdout, stderr) => {

13 const out = `${stdout ?? ""}${stderr ?? ""}`;

14 if (!err)

15 return resolve({ code: 0, out });

16 const timedOut = Boolean(err.killed || err.signal === "SIGKILL");

17 const code = typeof err.code === "number" ? err.code : 1;

18 resolve({ code: code === 0 ? 1 : code, out, timedOut });

19 });

20});

21/** The headless command for each runner. Exported for tests and docs honesty. */

22export function runnerCommand(opts, prompt, platform = process.platform) {

23 if (opts.runner === "claude") {

24 return { cmd: "claude", args: ["-p", prompt, "--permission-mode", "acceptEdits"] };

25 }

26 if (opts.runner === "codex") {

27 return { cmd: "codex", args: ["exec", "--full-auto", prompt] };

28 }

dist/index.jsView file

Lines 1896-1936javascript

1896 const claims = service.listClaims({ status: "active" }).claims;

1897 out(renderClaimsTable(claims));

1898 service.store.close();

1899}

1900function resolvePort(argPort, env = process.env) {

Source & flagged code

3 flagged · loading source

dist/worker.jsView file

1import { execFile } from "node:child_process"; L2: import { remoteConfig, withRemote } from "./remote.js";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

8...(opts.timeoutMs ? { timeout: opts.timeoutMs, killSignal: "SIGKILL" } : {}), L9: // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`. L10: windowsVerbatimArguments: cmd === "cmd",

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L8

dist/index.jsView file

1916server.on("close", () => service.store.close()); L1917: log(`Tower listening on http://${host}:${port}/mcp${token ? " (token required)" : ""}`); L1918: log(`Live board: http://${host}:${port}/board`); ... L1927: } L1928: function gitDefaults(cwd, env = process.env) { L1929: const git = (cmd) => { L1930: try { L1931: return execSync(cmd, { cwd, stdio: ["ignore", "pipe", "ignore"] }).toString().trim(); L1932: } catch {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L1916

Findings

3 High2 Medium3 Low

HighChild Processdist/worker.js

HighShelldist/worker.js

HighSame File Env Network Executiondist/index.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

3 flagged

dist/worker.jsView file

Lines 1-28javascript

1import { execFile } from "node:child_process";

2import { remoteConfig, withRemote } from "./remote.js";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

3import { buildService } from "./lib.js";

4/** execFile-based Exec that never throws: captures stdout+stderr, exit code, timeouts. */

5export const defaultExec = (cmd, args, opts) => new Promise((resolve) => {

6 execFile(cmd, args, {

7 cwd: opts.cwd,

8 ...(opts.timeoutMs ? { timeout: opts.timeoutMs, killSignal: "SIGKILL" } : {}),

9 // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

10 windowsVerbatimArguments: cmd === "cmd",

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L8

11 maxBuffer: 10 * 1024 * 1024,

12 }, (err, stdout, stderr) => {

13 const out = `${stdout ?? ""}${stderr ?? ""}`;

14 if (!err)

15 return resolve({ code: 0, out });

16 const timedOut = Boolean(err.killed || err.signal === "SIGKILL");

17 const code = typeof err.code === "number" ? err.code : 1;

18 resolve({ code: code === 0 ? 1 : code, out, timedOut });

19 });

20});

21/** The headless command for each runner. Exported for tests and docs honesty. */

22export function runnerCommand(opts, prompt, platform = process.platform) {

23 if (opts.runner === "claude") {

24 return { cmd: "claude", args: ["-p", prompt, "--permission-mode", "acceptEdits"] };

25 }

26 if (opts.runner === "codex") {

27 return { cmd: "codex", args: ["exec", "--full-auto", prompt] };

28 }

dist/index.jsView file

Lines 1896-1936javascript

1896 const claims = service.listClaims({ status: "active" }).claims;

1897 out(renderClaimsTable(claims));

1898 service.store.close();

1899}

1900function resolvePort(argPort, env = process.env) {