github JavaScript re-analysis due

amos-labs/amos-agent

Open-source native operator for the governed AMOS company brain — model-independent, locally capable, and human-governed.

maintainer: amos-labs
license: NOASSERTION
first seen: 2026-07-17
last seen: 2026-08-14
releases · 30d: 43
short id

Drift inferred · capture-to-capture

HIGH 2026-08-14 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-14 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-13 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-12 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-12 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-12 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-12 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-11 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-08-09 code analysis flagged dynamic code execution in amos-labs/amos-agent
HIGH 2026-07-30 code analysis flagged dynamic code execution in amos-labs/amos-agent

tool count over time

07-17 15:21 now

2026-07-17 12t

2026-08-11 14t

capabilities 14 tools

transport stdio · http counts 14 tools · 0 res · 0 prompts permission surface via README inference

tools

amos_call_engine_tool
amos_company_overview
amos_get_started
amos_list_engines
amos_load_engine_tools
amos_resume_company
amos_whoami
apply_patch
desktop_inspect_project
git_status

and git_diff
list_files

, read_file, and write_file
run_bash
search_files
web_fetch

and optional web_search

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 386d340 · analyzer v32 · 1h ago

danger signals4

dynamic code execution vm exec amos-labs-amos-agent-386d340/scripts/benchmarkLocalModels.js :218 vm.runInNewContext(
suspicious endpoint 93.184.216.34 amos-labs-amos-agent-386d340/test/browser.test.js :435 url: "https://93.184.216.34/callback?access_token=secret",
suspicious endpoint 169.254.169.254 (cloud metadata) amos-labs-amos-agent-386d340/test/documentArtifacts.test.js :48 sources: [{ label: "Metadata", url: "http://169.254.169.254/latest/meta-data" }]
suspicious endpoint 93.184.216.34 amos-labs-amos-agent-386d340/test/web.test.js :20 () => fetchPublicUrl("http://93.184.216.34/start", { fetchImpl: async () => { calls += 1; return response; } }),

code evidence vv0.18.2 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 177

filesystem 73

fs amos-labs-amos-agent-386d340/.tmp/vc-deck-20260801/edit_deck.mjs :1 import fs from "node:fs/promises";
fs amos-labs-amos-agent-386d340/desktop/browserRuntime.js :2 import { mkdir, mkdtemp, readFile, rm, stat, unlink, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/desktop/main.js :15 import { appendFileSync, mkdirSync, readFileSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/scripts/benchmarkKnowledgeIntegration.js :2 import { readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/scripts/benchmarkLocalModels.js :2 import { writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/scripts/benchmarkLocalVision.js :2 import { readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/scripts/compileModelCapabilities.js :2 import { readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/scripts/prepareOllamaRuntime.js :2 import { createReadStream, createWriteStream } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/scripts/prepareRouterModel.js :4 import { createReadStream, createWriteStream } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/scripts/qualifyBedrockMantle.js :3 import { readFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/artifacts/documentAssets.js :1 import { readFile, stat } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/auth/tokenStore.js :2 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/attachments.js :3 import { readFile, stat } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/browserRecipeStore.js :2 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/companyCache.js :7 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/controller.js :2 import { mkdir, stat } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/decisionKeyStore.js :7 import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/localPreview.js :2 import { readFile, stat } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/localReceiptStore.js :2 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/managedOllamaRuntime.js :2 import { existsSync } from "node:fs";
fs amos-labs-amos-agent-386d340/src/desktop/memoryCapsule.js :9 import { chmod, readFile, rename, stat, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/offlineIntelligence.js :2 import { createReadStream } from "node:fs";
fs amos-labs-amos-agent-386d340/src/desktop/offlineProposal.js :2 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/privateMemoryStore.js :2 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/savedViewStore.js :2 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/sessionContinuity.js :2 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/settingsStore.js :1 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/taskCheckpoint.js :2 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/taskStore.js :2 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/taskWorkspace.js :2 import { access, mkdir, realpath } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/desktop/telemetry.js :2 import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/model/intelligenceRouter.js :1 import { readFileSync } from "node:fs";
fs amos-labs-amos-agent-386d340/src/tools/artifacts.js :2 import { mkdir, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/tools/coding.js :1 import { readdir, readFile, stat } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/tools/documentReview.js :2 import { readFile, stat, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/tools/files.js :1 import { mkdir, open, readdir, stat, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/tools/spreadsheets.js :2 import { mkdir, writeFile } from "node:fs/promises";
fs amos-labs-amos-agent-386d340/src/util/pathSafety.js :1 import { existsSync, realpathSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/attachments.test.js :3 import { mkdtemp, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/bash.test.js :3 import { mkdtempSync, realpathSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/browser.test.js :5 import { readFileSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/browserRecipes.test.js :3 import { mkdtemp, readFile, rm } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/codingTools.test.js :3 import { mkdtemp, readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/companyCache.test.js :7 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/decisionKeyStore.test.js :3 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopAccountStore.test.js :3 import { mkdtemp, readFile, stat, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopCanvasController.test.js :3 import { mkdir, mkdtemp, realpath, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopControllerAttachments.test.js :3 import { mkdtemp, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopManagedTasks.test.js :2 import { mkdtemp } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopPrivateMemory.test.js :2 import { mkdtemp, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopSettings.test.js :3 import { mkdtemp, readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopTaskController.test.js :12 import { mkdtemp } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopTaskStore.test.js :2 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/desktopTelemetry.test.js :2 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/documentArtifacts.test.js :3 import { copyFile, mkdtemp, readFile, stat } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/documentReview.test.js :3 import { mkdtemp, readFile, stat, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/documentation.test.js :2 import { existsSync, readdirSync, readFileSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/files.test.js :3 import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/intelligenceRouter.test.js :4 import { readFileSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/localPreview.test.js :3 import { mkdtemp, rm, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/localReceiptStore.test.js :3 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/memoryCapsule.test.js :2 import { mkdtemp, readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/oauth.test.js :4 import { chmodSync, mkdtempSync, statSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/offlineProposal.test.js :2 import { mkdtemp, readFile, rm } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/pathSafety.test.js :3 import { mkdtempSync, realpathSync, symlinkSync } from "node:fs";
fs (weak) amos-labs-amos-agent-386d340/test/privateMemoryStore.test.js :2 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/rendererContract.test.js :2 import { readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/savedViewStore.test.js :3 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/sessionContinuity.test.js :3 import { mkdtemp, readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/spreadsheetArtifacts.test.js :3 import { access, mkdtemp } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/taskCheckpoint.test.js :3 import { mkdtemp, readFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/taskWorkspace.test.js :3 import { mkdtemp, readFile, writeFile } from "node:fs/promises";
fs (weak) amos-labs-amos-agent-386d340/test/updateManager.test.js :3 import { readFileSync } from "node:fs";

shell / exec 7

shell (weak) amos-labs-amos-agent-386d340/scripts/prepareOllamaRuntime.js :7 import { spawn } from "node:child_process";
shell amos-labs-amos-agent-386d340/src/auth/oauth.js :2 import { spawn } from "node:child_process";
shell amos-labs-amos-agent-386d340/src/desktop/managedOllamaRuntime.js :1 import { spawn } from "node:child_process";
shell amos-labs-amos-agent-386d340/src/desktop/taskWorkspace.js :1 import { execFile as execFileCallback } from "node:child_process";
shell amos-labs-amos-agent-386d340/src/tools/bash.js :1 import { spawn } from "node:child_process";
shell amos-labs-amos-agent-386d340/src/tools/coding.js :3 import { spawn } from "node:child_process";
shell (weak) amos-labs-amos-agent-386d340/test/taskWorkspace.test.js :2 import { execFile as execFileCallback } from "node:child_process";

network 20

net (weak) amos-labs-amos-agent-386d340/scripts/benchmarkKnowledgeIntegration.js :3 import http from "node:http";
net (weak) amos-labs-amos-agent-386d340/scripts/benchmarkLocalModels.js :3 import http from "node:http";
net (weak) amos-labs-amos-agent-386d340/scripts/benchmarkLocalVision.js :34 const response = await fetch(`${baseUrl.replace(/\/$/, "")}/api/chat`, {
net (weak) amos-labs-amos-agent-386d340/scripts/prepareOllamaRuntime.js :58 const response = await fetch(url, { redirect: "follow" });
net (weak) amos-labs-amos-agent-386d340/scripts/prepareRouterModel.js :104 const response = await fetch(url, {
net (weak) amos-labs-amos-agent-386d340/scripts/probeLocalContext.js :75 const response = await fetch(`${baseUrl.replace(/\/$/, "")}${path}`, {
net (weak) amos-labs-amos-agent-386d340/scripts/qualifyBedrockMantle.js :214 return fetch(url, { method, headers: signed.headers, body: body || undefined });
net (weak) amos-labs-amos-agent-386d340/src/auth/demo.js :2 import http from "node:http";
net amos-labs-amos-agent-386d340/src/auth/oauth.js :3 import http from "node:http";
net amos-labs-amos-agent-386d340/src/desktop/localPreview.js :1 import { createServer } from "node:http";
net amos-labs-amos-agent-386d340/src/desktop/offlineIntelligence.js :556 const response = await this.fetch(`${this.baseUrl}${path}`, {
net amos-labs-amos-agent-386d340/src/desktop/remoteState.js :939 const response = await this.fetch(url.toString(), {
net amos-labs-amos-agent-386d340/src/desktop/telemetry.js :87 const response = await this.fetch(endpointFor(mcpUrl), {
net amos-labs-amos-agent-386d340/src/mcp/amosMcpClient.js :94 const response = await this.fetch(this.url, {
net amos-labs-amos-agent-386d340/src/model/intelligenceRouter.js :146 const response = await this.fetch(`${this.baseUrl}/api/chat`, {
net amos-labs-amos-agent-386d340/src/model/openAiCompatibleClient.js :69 response = await this.fetch(`${this.config.baseUrl.replace(/\/$/, "")}/chat/completions`, {
net amos-labs-amos-agent-386d340/src/util/fetchCompat.js :1 import http from "node:http";
net amos-labs-amos-agent-386d340/src/util/publicUrl.js :2 import { isIP } from "node:net";
net (weak) amos-labs-amos-agent-386d340/test/demoAuth.test.js :2 import http from "node:http";
net (weak) amos-labs-amos-agent-386d340/test/localPreview.test.js :25 assert.equal(await fetch(started.url).then((response) => response.text()), "<h1>AMOS preview</h1>");

declared dependencies 14

@aws-sdk/credential-providers@^3.1107.0
@napi-rs/canvas@^1.0.2
@smithy/hash-node@^4.4.16
@smithy/protocol-http@^5.5.16
@smithy/signature-v4@^5.6.12
docx@9.7.1
electron-updater@6.8.9
exceljs@4.4.0
jszip@^3.10.1
mammoth@1.12.0
pdfjs-dist@6.2.108
pdfkit@0.19.1
electron@^39.2.7
electron-builder@26.15.3

perm:untrusted 1

untrusted (weak) amos-labs-amos-agent-386d340/test/localPreview.test.js :25 assert.equal(await fetch(started.url).then((response) => response.text()), "<h1>AMOS preview</h1>");