registry / wicked-interactive / 0.6.0

wicked-interactive@0.6.0

Interactive HTML & Presentation Builder with an in-browser feedback loop for business users.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

GitDependency

scanned 33 file(s), 435 KB of source, external domains: reactjs.org, stripe.com, wicked-reads.app, www.w3.org

Source & flagged code

5 flagged

bin/wicked-interactive.jsView file

Lines 3-43javascript

3//

4// wicked-interactive serve [--root <docs-dir>] [--port N] [--daemon] [--restart]

5// Multi-document mode (ADR-0015). Hosts every workspace under <docs-dir>; new docs are

6// created from the UI. The control plane is wicked-bus (ADR-0019).

7//

8// ONE SHARED INSTANCE by default (ADR-0022 amended). With no --root, every session uses the

9// canonical root ~/wicked-interactive/docs — so `serve --daemon` from any session REUSES the one

10// running bridge instead of spawning another on a different port (the "why is it on 5 ports"

11// confusion). Pass --root only when you deliberately want a SEPARATE, isolated instance.

Source & flagged code

5 flagged · loading source

bin/wicked-interactive.jsView file

23import { readFileSync, openSync, mkdirSync } from "node:fs"; L24: import { spawn } from "node:child_process"; L25: import { resolve, join } from "node:path";

High

Child Process

Package source references child process execution.

bin/wicked-interactive.jsView on unpkg · L23

bin/ensure-siblings.mjsView file

44console.log(` $ ${cmd}`); L45: return spawnSync(cmd, { stdio: "inherit", shell: true }).status === 0; L46: }

High

Shell

Package source references shell execution.

bin/ensure-siblings.mjsView on unpkg · L44

11// L12: // Cross-platform: spawnSync(..., { shell:true }) resolves `claude`/`npx` via PATH on L13: // macOS, Linux, and Windows. ... L22: const PLAYWRIGHT_STEPS = [ L23: "npm install playwright", L24: "npx playwright install",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/ensure-siblings.mjsView on unpkg · L11

src/service/theme-grab.jsView file

13// EVERY address for the host and reject if any is loopback, link-local (incl. the cloud metadata L14: // endpoint 169.254.169.254), private, ULA, CGNAT, or unspecified; (4) PIN the validated IP into L15: // Chrome via --host-resolver-rules so DNS can't be rebound between validation and fetch. This ... L19: // Chrome `--print-to-pdf` FOLLOWS HTTP redirects, so a 302 from a validated public host to L20: // `http://169.254.169.254/` (or any private host) was followed and the internal response rendered. L21: // To close the main-document redirect vector portably (no OS-specific egress sandbox), we walk the ... L32: L33: import { spawn } from "node:child_process"; L34: import { existsSync } from "node:fs"; L35: import { lookup } from "node:dns/promises"; L36: import { isIP } from "node:net"; ... L265: return new Promise((resolveP, reject) => {

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/service/theme-grab.jsView on unpkg · L13

vendor/pptx/html_to_pptx.pyView file

•path = vendor/pptx/html_to_pptx.py kind = build_helper sizeBytes = 6408 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/pptx/html_to_pptx.pyView on unpkg

Findings

4 High5 Medium4 Low

HighChild Processbin/wicked-interactive.js

HighShellbin/ensure-siblings.mjs

HighCloud Metadata Accesssrc/service/theme-grab.js

HighRuntime Package Installbin/ensure-siblings.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpervendor/pptx/html_to_pptx.py

MediumStructural Risk Force Deep Review

MediumGit Dependency

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

bin/ensure-siblings.mjsView file

Lines 1-64javascript

1#!/usr/bin/env node

2// ensure-siblings.mjs — set up the helper tools wicked-interactive needs (ADR-0016).

3//

4// Run once at startup by the `serve` skill. For each MISSING sibling it runs the real

5// install command — transparently: every command is printed before it runs, so the user

6// always sees exactly what's happening on their machine. Nothing is installed silently.

7//

8// node bin/ensure-siblings.mjs # auto-install anything missing

9// node bin/ensure-siblings.mjs --check # report only, install nothing

10// WI_NO_AUTOINSTALL=1 node … # same as --check (opt out of auto-install)

11//

12// Cross-platform: spawnSync(..., { shell:true }) resolves `claude`/`npx` via PATH on

13// macOS, Linux, and Windows.

15import { spawnSync } from "node:child_process";

16import { preflight, playwrightInstalled } from "../src/service/preflight.js";

18// Playwright (ADR-0018) powers demo recording. It's an npm dependency, not a Claude plugin,

19// so it installs differently: pull the package + browser binaries, then the skills (the

20// supervising agent uses these to learn the target app). `playwright-cli install --skills`

21// relies on the softlinked skill dirs in the standard locations.

22const PLAYWRIGHT_STEPS = [

23 "npm install playwright",

24 "npx playwright install",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/ensure-siblings.mjsView on unpkg · L11

25 "playwright-cli install --skills",

26];

28// Each sibling installs differently — an ordered list of shell commands per tool.

29// garden → Claude Code plugin (marketplace add, then install)

30// brain → npm package, run via npx

31// (wicked-prezzie was absorbed into wicked-interactive — ADR-0020 — so it's no longer a

32// sibling. wicked-bus is a hard npm dependency of this package; the serve skill seeds it.)

33const INSTALL_STEPS = {

34 "wicked-garden": [

35 "claude plugin marketplace add mikeparcewski/wicked-garden",

36 "claude plugin install wicked-garden",

37 ],

38 "wicked-brain": [

39 "npx -y wicked-brain",

40 ],

41};

43function run(cmd) {

44 console.log(` $ ${cmd}`);

45 return spawnSync(cmd, { stdio: "inherit", shell: true }).status === 0;

46}

High

Shell

Package source references shell execution.

bin/ensure-siblings.mjsView on unpkg · L44

48const checkOnly = process.argv.includes("--check") || process.env.WI_NO_AUTOINSTALL === "1";

50let pf = preflight();

51const pwMissing = !playwrightInstalled();

52if (pf.ok && !pwMissing) {

53 console.log("Helper tools: all present. Nothing to install.");

54 process.exit(0);

55}

57const wanted = [...pf.missing, ...(pwMissing ? ["playwright (demo recorder)"] : [])];

58console.log(`wicked-interactive needs ${wanted.length} helper tool(s): ${wanted.join(", ")}`);

60if (checkOnly) {

61 console.log("\nAuto-install is off. Install these yourself, then restart:");

62 if (pf.install_hint) console.log(pf.install_hint);

63 if (pwMissing) console.log(pf.playwright.install_hint);

64 process.exit(1);

src/service/theme-grab.jsView file

Lines 1-33javascript

1// theme-grab.js — the deterministic, model-free "grab a URL to a PDF" primitive

2// (the service half of "learn a theme from a URL", ADR-0010/ADR-0020).

3//

4// Judgment (reading the captured design — palette, type scale, spacing, card treatment) is the

5// AGENT's job and lives in the assist skill. This module does NOTHING intelligent: it points a

6// headless browser at a LIVE https URL and prints it to PDF — the same `chrome --print-to-pdf`

7// primitive export.js uses for a version's HTML, only the final argument is the live URL instead

8// of `file://<html>`. We REUSE export.js's findChrome() so chrome discovery (and the WI_CHROME

9// override / clear "no Chrome found" error) stays in one place.

10//

11// SSRF GUARD (security review). The URL is user-supplied and the service fetches it server-side,

12// so before rendering we: (1) require http(s); (2) reject metadata/loopback hostnames; (3) resolve

13// EVERY address for the host and reject if any is loopback, link-local (incl. the cloud metadata

14// endpoint 169.254.169.254), private, ULA, CGNAT, or unspecified; (4) PIN the validated IP into

15// Chrome via --host-resolver-rules so DNS can't be rebound between validation and fetch. This

16// closes the direct (paste-the-metadata-URL) and DNS-rebinding vectors.

17//

18// REDIRECT-CHAIN PREFLIGHT (issue #21). Validating only the INITIAL host left a residual: headless

19// Chrome `--print-to-pdf` FOLLOWS HTTP redirects, so a 302 from a validated public host to

20// `http://169.254.169.254/` (or any private host) was followed and the internal response rendered.

21// To close the main-document redirect vector portably (no OS-specific egress sandbox), we walk the

22// redirect chain Node-side with `redirect: 'manual'` BEFORE handing anything to Chrome

23// (resolveRedirectChain): every hop's URL — initial AND each `Location` — is re-validated through

24// assertPublicUrl, and Chrome is pointed at (and IP-pinned to) the FINAL non-redirect URL. A

25// redirect to a private/metadata host throws at the offending hop; loops/over-long chains throw on

26// maxHops. RESIDUAL (still open): page SUBRESOURCES — img/css/script the FINAL page itself loads

27// from a private host — are still fetched by Chrome and are NOT closed by this preflight (the

28// preflight only follows the MAIN-document redirect chain, not the resources the rendered page

29// pulls). Fully closing that requires network-egress restriction (a namespace/firewall limiting

30// Chrome to public CIDRs); tracked as a follow-up. The renderer + validator + fetchImpl are

31// injectable so CI needs no browser/network/DNS and the guard is unit-testable deterministically.

33import { spawn } from "node:child_process";

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

src/service/theme-grab.jsView on unpkg · L13