registry / tower-mcp / 0.6.0

tower-mcp@0.6.0

Air-traffic control for AI agents editing a shared repo — semantic pre-flight collision detection over MCP. Model-agnostic (Claude Code, Cursor, Codex).

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 231 KB of source

Source & flagged code

4 flagged

dist/worker.jsView file

Lines 1-31javascript

1import { execFile } from "node:child_process";

2import { remoteConfig, withRemote } from "./remote.js";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

3import { buildService } from "./lib.js";

4/** execFile-based Exec that never throws: captures stdout+stderr, exit code, timeouts. */

5export const defaultExec = (cmd, args, opts) => new Promise((resolve) => {

6 const child = execFile(cmd, args, {

7 cwd: opts.cwd,

8 ...(opts.timeoutMs ? { timeout: opts.timeoutMs, killSignal: "SIGKILL" } : {}),

9 // Agent CLIs (`claude`, `codex`) are .cmd shims on Windows; Node refuses to spawn

10 // .cmd without a shell (CVE-2024-27980), so runners set shell:true. Their args are

11 // all static — the untrusted prompt goes via stdin, never the command line.

12 ...(opts.shell ? { shell: true } : {}),

13 // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L11

14 windowsVerbatimArguments: cmd === "cmd",

15 maxBuffer: 10 * 1024 * 1024,

16 }, (err, stdout, stderr) => {

17 const out = `${stdout ?? ""}${stderr ?? ""}`;

18 if (!err)

19 return resolve({ code: 0, out });

20 const timedOut = Boolean(err.killed || err.signal === "SIGKILL");

21 const code = typeof err.code === "number" ? err.code : 1;

22 resolve({ code: code === 0 ? 1 : code, out, timedOut });

23 });

24 if (opts.input != null && child.stdin) {

25 child.stdin.on("error", () => { }); // ignore EPIPE if the child exits early

26 child.stdin.end(opts.input);

27 }

28});

29/** The headless command for each runner. Exported for tests and docs honesty. */

30export function runnerCommand(opts, prompt, platform = process.platform) {

31 // claude/codex take the prompt on stdin, and run via the shell so the Windows `.cmd`

dist/index.jsView file

Lines 2330-2370javascript

2330 const claims = service.listClaims({ status: "active" }).claims;

2331 out(renderClaimsTable(claims));

2332 service.store.close();

2333}

2334function resolvePort(argPort, env = process.env) {

dist/commands.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = tower-mcp@0.5.0 matchedIdentity = npm:dG93ZXItbWNw:0.5.0 similarity = 0.500 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/worker.jsView file

1import { execFile } from "node:child_process"; L2: import { remoteConfig, withRemote } from "./remote.js";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

11// all static — the untrusted prompt goes via stdin, never the command line. L12: ...(opts.shell ? { shell: true } : {}), L13: // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L11

dist/index.jsView file

2350server.on("close", () => service.store.close()); L2351: log(`Tower listening on http://${host}:${port}/mcp${token ? " (token required)" : ""}`); L2352: log(`Live board: http://${host}:${port}/board`); ... L2361: } L2362: function gitDefaults(cwd, env = process.env) { L2363: const git = (cmd) => { L2364: try { L2365: return execSync(cmd, { cwd, stdio: ["ignore", "pipe", "ignore"] }).toString().trim(); L2366: } catch {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2350

dist/commands.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands.jsView on unpkg

Findings

4 High2 Medium3 Low

HighChild Processdist/worker.js

HighShelldist/worker.js

HighSame File Env Network Executiondist/index.js

HighPrevious Version Dangerous Deltadist/commands.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

4 flagged

dist/worker.jsView file

Lines 1-31javascript

1import { execFile } from "node:child_process";

2import { remoteConfig, withRemote } from "./remote.js";

High

Child Process

Package source references child process execution.

dist/worker.jsView on unpkg · L1

3import { buildService } from "./lib.js";

4/** execFile-based Exec that never throws: captures stdout+stderr, exit code, timeouts. */

5export const defaultExec = (cmd, args, opts) => new Promise((resolve) => {

6 const child = execFile(cmd, args, {

7 cwd: opts.cwd,

8 ...(opts.timeoutMs ? { timeout: opts.timeoutMs, killSignal: "SIGKILL" } : {}),

9 // Agent CLIs (`claude`, `codex`) are .cmd shims on Windows; Node refuses to spawn

10 // .cmd without a shell (CVE-2024-27980), so runners set shell:true. Their args are

11 // all static — the untrusted prompt goes via stdin, never the command line.

12 ...(opts.shell ? { shell: true } : {}),

13 // cmd.exe needs verbatim args or Node's quoting breaks `/c <template>`.

High

Shell

Package source references shell execution.

dist/worker.jsView on unpkg · L11

14 windowsVerbatimArguments: cmd === "cmd",

15 maxBuffer: 10 * 1024 * 1024,

16 }, (err, stdout, stderr) => {

17 const out = `${stdout ?? ""}${stderr ?? ""}`;

18 if (!err)

19 return resolve({ code: 0, out });

20 const timedOut = Boolean(err.killed || err.signal === "SIGKILL");

21 const code = typeof err.code === "number" ? err.code : 1;

22 resolve({ code: code === 0 ? 1 : code, out, timedOut });

23 });

24 if (opts.input != null && child.stdin) {

25 child.stdin.on("error", () => { }); // ignore EPIPE if the child exits early

26 child.stdin.end(opts.input);

27 }

28});

29/** The headless command for each runner. Exported for tests and docs honesty. */

30export function runnerCommand(opts, prompt, platform = process.platform) {

31 // claude/codex take the prompt on stdin, and run via the shell so the Windows `.cmd`

dist/index.jsView file

Lines 2330-2370javascript

2330 const claims = service.listClaims({ status: "active" }).claims;

2331 out(renderClaimsTable(claims));

2332 service.store.close();

2333}

2334function resolvePort(argPort, env = process.env) {

dist/commands.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands.jsView on unpkg