npm JavaScript analyzed 0.64.1 unconfirmed MCP

experimental-ash

v0.64.1

npm

Filesystem-first framework for durable backend AI agents that run anywhere.

Drift inferred · capture-to-capture

HIGH 2026-06-04 code analysis flagged committed secret, dynamic code execution in experimental-ash

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.64.1 · analyzer v28 · 3d ago

code evidence v0.64.1 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 631

fs package/bin/ash.js :4 import { access, readdir, realpath, stat } from "node:fs/promises";

shell package/bin/ash.js :3 import { spawn } from "node:child_process";
shell package/dist/src/compiled/_chunks/node/dist-BQYUcBqu.js :59 `){i=n;break}let a=e.substring(r,i),o=0,s=!1;for(let e of a)if(e===n)o+=1;else if(e!==` `&&e!==` `){s=!0;break}return o>=3&&!s},Qc=(e,t,n,r)=>n===`\\`||e.includes(`$`)&&qc(e,t)?!0:n!==`*`&&r===`*`?(t<
shell package/dist/src/compiled/_chunks/workflow/dist-gEXVSMPU.js :11 ]))`;continue}else if(r[e]===`$`){i+=`($|(?=[\r
shell package/dist/src/compiled/gray-matter/index.js :14 `&&++this.index,this.lineStart=this.index;else if(i.Character.isLineTerminator(s.charCodeAt(0)))break;else o+=s}return t!==``&&(this.index=e,this.throwUnexpectedToken()),{type:8,value:o,octal:n,lineNu
shell package/dist/src/evals/runner/resolve-git-metadata.js :1 import{execSync}from"node:child_process";function resolveLocalGitMetadata(e){let t=execGitCommand(`git rev-parse HEAD`,e);return{branch:execGitCommand(`git branch --show-current`,e)||void 0,sha:t||voi

net package/dist/src/chunks/use-ash-agent-D7LvOfgD.js :262 const response = await fetch(url, {
net package/dist/src/chunks/use-ash-agent-DPYNpc07.js :262 const response = await fetch(url, {
net package/dist/src/client/open-stream.js :1 import{createAshMessageStreamRoutePath}from"#protocol/routes.js";import{ClientError}from"#client/client-error.js";import{createClientUrl}from"#client/url.js";import{isStreamDisconnectError,readNdjsonS
net package/dist/src/internal/workflow-bundle/ash-service-route-output.js :2 import { Server } from "node:http";
net package/dist/src/internal/workflow/index.js :1 export*from"#compiled/@workflow/core/index.js";async function fetch(...e){"use step";return await globalThis.fetch(...e)}export{fetch};
net package/dist/src/packages/ash-scaffold/src/web-template.js :1677 const response = await fetch(url);

secrets package/dist/src/execution/workflow-callback-url.js :1 function resolveVercelProductionCallbackBaseUrl(){return process.env.VERCEL_ENV===`production`&&process.env.VERCEL_PROJECT_PRODUCTION_URL?`https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`:null}fu
secrets package/dist/src/public/channels/github/auth.js :1 import{isObject}from"#shared/guards.js";import{createSign}from"node:crypto";const installationTokenCache=new Map;async function resolveGitHubAppId(e){let t=e??process.env.GITHUB_APP_ID;if(t===void 0||