registry / vibe-lm / 0.2.6

vibe-lm@0.2.6

A comprehensive set of agentic tools for LM Studio: file operations, web fetching/search, memory, SSH, and an autonomous vibe_bridge keep-alive loop.

Static Scan Results

scanned 10h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 18 file(s), 464 KB of source, external domains: example.com, one.com, search.example.com, two.com

Source & flagged code

9 flagged

dist/toolsProvider.jsView file

Lines 51-91javascript

51exports.resultCharBudget = resultCharBudget;

52exports.distillToolFact = distillToolFact;

53exports.webSearch = webSearch;

54exports.binaryExtCheck = binaryExtCheck;

55exports.pickBestModel = pickBestModel;

56exports.checkBashCommandSafety = checkBashCommandSafety;

57exports.toolsProvider = toolsProvider;

58exports.headBudgetChars = headBudgetChars;

59exports.buildContextSpine = buildContextSpine;

60exports.preprocessMessage = preprocessMessage;

61const sdk_1 = require("@lmstudio/sdk");

62const zod_1 = require("zod");

63const promises_1 = require("fs/promises");

64const fs_1 = require("fs");

65const path_1 = require("path");

66const os_1 = require("os");

67const crypto_1 = require("crypto");

68const math = __importStar(require("mathjs"));

69const sessionLog_1 = require("./sessionLog");

70const config_1 = require("./config");

71const toolSettings_1 = require("./toolSettings");

72const LMSTUDIO_API_PORT = process.env.LMSTUDIO_API_PORT || "1234";

73const API_BASE = `http://localhost:${LMSTUDIO_API_PORT}`;

74// Persistent runtime data lives under extensions/data, NOT extensions/plugins — `lms dev --install`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/toolsProvider.jsView on unpkg · L71

75// wipes the plugin install directory on every deploy, which would otherwise destroy this data.

76// VIBE_LM_DATA_DIR lets tests point this at an isolated directory instead of the real user install.

77const DATA_DIR = process.env.VIBE_LM_DATA_DIR || (0, path_1.resolve)((0, os_1.homedir)(), ".lmstudio", "extensions", "data", "drunkktoys", "vibe-lm");

78const CONFIG_PATH = (0, path_1.resolve)(DATA_DIR, "config.json");

79const RUNTIME_STATE_PATH = (0, path_1.resolve)(DATA_DIR, "runtime-state.json");

80const JSONL_CACHE_PATH = (0, path_1.resolve)(DATA_DIR, "session-log.jsonl");

81const DEFAULT_CONTEXT_WINDOW = 8192;

82const PROMPT_BUDGET_RATIO = 0.50;

83const MAX_TOOL_RESULT_CHARS = 500;

84const MAX_NON_CODE_RESULT_CHARS = 300;

85// Importance tiers for how much of a tool result is kept verbatim on the turn log. Flat truncation

86// treated a 2 KB file read the same as a one-line failed probe; tiering keeps more of what carries

87// information (reads/searches) and less of the noise we already distil into a fact (failures).

88const TOOL_RESULT_CHARS_HIGH = 1500;

89const TOOL_RESULT_CHARS_LOW = 300;

90const HIGH_VALUE_RESULT_TOOLS = new Set([

91 "read_file", "search_files", "list_files", "explore_workspace", "web_search",

•matchType = previous_version_dangerous_delta matchedPackage = vibe-lm@0.2.4 matchedIdentity = npm:dmliZS1sbQ:0.2.4 similarity = 0.722 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/toolsProvider.jsView on unpkg

tests/test_build.shView file

•path = tests/test_build.sh kind = payload_in_excluded_dir sizeBytes = 1418 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tests/test_build.shView on unpkg

•path = tests/test_build.sh kind = build_helper sizeBytes = 1418 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tests/test_build.shView on unpkg

release/vibeLM-v0.2.6.zipView file

•path = release/vibeLM-v0.2.6.zip kind = high_entropy_blob sizeBytes = 152195 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

release/vibeLM-v0.2.6.zipView on unpkg

•path = release/vibeLM-v0.2.6.zip kind = compressed_blob sizeBytes = 152195 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

release/vibeLM-v0.2.6.zipView on unpkg

•path = release/vibeLM-v0.2.6.zip kind = nested_archive_needs_inspection sizeBytes = 152195 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

release/vibeLM-v0.2.6.zipView on unpkg

tests/cascade.test.tsView file

Lines 444-484typescript

444

445 // Successful calls are keyed on their exact signature (not the coarse program name), so distinct

446 // successes are each kept rather than collapsed — the fact tag therefore embeds the full command.

447 const echoOk = mems.filter((m: any) => /bash_terminal `echo vibelm-ok` → ok/.test(m.content));

448 assert.equal(echoOk.length, 1

tests/tools.test.tsView file

Lines 133-173typescript

133});

134

135describe("ssh_exec injection safety", () => {

136 const workDir = join(tmpdir(), "vibe-lm-ssh-test-" + Date.now());

137 before(() => { if (!

Source & flagged code

9 flagged · loading source

dist/toolsProvider.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/toolsProvider.jsView on unpkg

71const toolSettings_1 = require("./toolSettings"); L72: const LMSTUDIO_API_PORT = process.env.LMSTUDIO_API_PORT || "1234"; L73: const API_BASE = `http://localhost:${LMSTUDIO_API_PORT}`; L74: // Persistent runtime data lives under extensions/data, NOT extensions/plugins — `lms dev --install` ... L311: } L312: const data = await resp.json(); L313: if (!data?.data?.length) { ... L1114: // Classify a tool result into a coarse outcome plus a short human-readable detail. Shell tools report L1115: // success/failure through the command's exitCode (a failed command still returns ok:true at the tool L1116: // layer), so they're inspected specially; everything else keys off the tool's own ok flag. ... L1526: ok: true, L1527: data: {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/toolsProvider.jsView on unpkg · L71

tests/test_build.shView file

•path = tests/test_build.sh kind = payload_in_excluded_dir sizeBytes = 1418 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tests/test_build.shView on unpkg

•path = tests/test_build.sh kind = build_helper sizeBytes = 1418 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tests/test_build.shView on unpkg

release/vibeLM-v0.2.6.zipView file

•path = release/vibeLM-v0.2.6.zip kind = high_entropy_blob sizeBytes = 152195 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

release/vibeLM-v0.2.6.zipView on unpkg

•path = release/vibeLM-v0.2.6.zip kind = compressed_blob sizeBytes = 152195 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

release/vibeLM-v0.2.6.zipView on unpkg

•path = release/vibeLM-v0.2.6.zip kind = nested_archive_needs_inspection sizeBytes = 152195 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

release/vibeLM-v0.2.6.zipView on unpkg

tests/cascade.test.tsView file

464patternName = generic_password severity = medium line = 464 matchedText = { host: ..." },

Medium

Secret Pattern

Hardcoded password in tests/cascade.test.ts

tests/cascade.test.tsView on unpkg · L464

tests/tools.test.tsView file

153patternName = generic_password severity = medium line = 153 matchedText = password...nt",

Medium

Secret Pattern

Hardcoded password in tests/tools.test.ts

tests/tools.test.tsView on unpkg · L153

Findings

3 High8 Medium5 Low

HighShips High Entropy Blobrelease/vibeLM-v0.2.6.zip

HighPayload In Excluded Dirtests/test_build.sh

HighPrevious Version Dangerous Deltadist/toolsProvider.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/toolsProvider.js

MediumShips Build Helpertests/test_build.sh

MediumShips Compressed Blobrelease/vibeLM-v0.2.6.zip

MediumStructural Risk Force Deep Review

MediumSecret Patterntests/cascade.test.ts

MediumSecret Patterntests/tools.test.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNested Archive Needs Inspectionrelease/vibeLM-v0.2.6.zip

Source & flagged code

9 flagged

dist/toolsProvider.jsView file

Lines 51-91javascript

51exports.resultCharBudget = resultCharBudget;

52exports.distillToolFact = distillToolFact;

53exports.webSearch = webSearch;

54exports.binaryExtCheck = binaryExtCheck;

55exports.pickBestModel = pickBestModel;

56exports.checkBashCommandSafety = checkBashCommandSafety;

57exports.toolsProvider = toolsProvider;

58exports.headBudgetChars = headBudgetChars;

59exports.buildContextSpine = buildContextSpine;

60exports.preprocessMessage = preprocessMessage;

61const sdk_1 = require("@lmstudio/sdk");

62const zod_1 = require("zod");

63const promises_1 = require("fs/promises");

64const fs_1 = require("fs");

65const path_1 = require("path");

66const os_1 = require("os");

67const crypto_1 = require("crypto");

68const math = __importStar(require("mathjs"));

69const sessionLog_1 = require("./sessionLog");

70const config_1 = require("./config");

71const toolSettings_1 = require("./toolSettings");

72const LMSTUDIO_API_PORT = process.env.LMSTUDIO_API_PORT || "1234";

73const API_BASE = `http://localhost:${LMSTUDIO_API_PORT}`;

74// Persistent runtime data lives under extensions/data, NOT extensions/plugins — `lms dev --install`

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/toolsProvider.jsView on unpkg · L71

75// wipes the plugin install directory on every deploy, which would otherwise destroy this data.

76// VIBE_LM_DATA_DIR lets tests point this at an isolated directory instead of the real user install.

77const DATA_DIR = process.env.VIBE_LM_DATA_DIR || (0, path_1.resolve)((0, os_1.homedir)(), ".lmstudio", "extensions", "data", "drunkktoys", "vibe-lm");

78const CONFIG_PATH = (0, path_1.resolve)(DATA_DIR, "config.json");

79const RUNTIME_STATE_PATH = (0, path_1.resolve)(DATA_DIR, "runtime-state.json");

80const JSONL_CACHE_PATH = (0, path_1.resolve)(DATA_DIR, "session-log.jsonl");

81const DEFAULT_CONTEXT_WINDOW = 8192;

82const PROMPT_BUDGET_RATIO = 0.50;

83const MAX_TOOL_RESULT_CHARS = 500;

84const MAX_NON_CODE_RESULT_CHARS = 300;

85// Importance tiers for how much of a tool result is kept verbatim on the turn log. Flat truncation

86// treated a 2 KB file read the same as a one-line failed probe; tiering keeps more of what carries

87// information (reads/searches) and less of the noise we already distil into a fact (failures).

88const TOOL_RESULT_CHARS_HIGH = 1500;

89const TOOL_RESULT_CHARS_LOW = 300;

90const HIGH_VALUE_RESULT_TOOLS = new Set([

91 "read_file", "search_files", "list_files", "explore_workspace", "web_search",

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/toolsProvider.jsView on unpkg

tests/test_build.shView file

•path = tests/test_build.sh kind = payload_in_excluded_dir sizeBytes = 1418 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

tests/test_build.shView on unpkg

•path = tests/test_build.sh kind = build_helper sizeBytes = 1418 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tests/test_build.shView on unpkg

release/vibeLM-v0.2.6.zipView file

•path = release/vibeLM-v0.2.6.zip kind = high_entropy_blob sizeBytes = 152195 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

release/vibeLM-v0.2.6.zipView on unpkg

•path = release/vibeLM-v0.2.6.zip kind = compressed_blob sizeBytes = 152195 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

release/vibeLM-v0.2.6.zipView on unpkg

•path = release/vibeLM-v0.2.6.zip kind = nested_archive_needs_inspection sizeBytes = 152195 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

release/vibeLM-v0.2.6.zipView on unpkg

tests/cascade.test.tsView file

Lines 444-484typescript

444

445 // Successful calls are keyed on their exact signature (not the coarse program name), so distinct

446 // successes are each kept rather than collapsed — the fact tag therefore embeds the full command.

447 const echoOk = mems.filter((m: any) => /bash_terminal `echo vibelm-ok` → ok/.test(m.content));

448 assert.equal(echoOk.length, 1

tests/tools.test.tsView file

Lines 133-173typescript

133});

134

135describe("ssh_exec injection safety", () => {

136 const workDir = join(tmpdir(), "vibe-lm-ssh-test-" + Date.now());

137 before(() => { if (!