Fabrica Star

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution.

  PERMISSION_SHELL_UNDECLARED

  src/sarif.ts, line 112

  "py-os-system": "Python source uses os.system()",

  src/rules/sourceRules.ts, line 30

  message: "child_process.exec() called with a dynamically-built command string risks shell/command injection. Prefer execFile()/spawn() with an argument array.",

  src/rules/sourceRules.ts, line 53

  message: "os.system() runs a string through the shell. Prefer subprocess.run([...]) with a list of arguments and shell=False.",

  Show more

  data/known-flagged-servers.json, line 82

  "reason": "CVE-2025-53967 (CVSS 8.0): Command injection in fetch-with-retry.ts - when standard fetch fails, falls back to curl via child_process.exec without sanitizing the URL. 60

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address. can reach registry.npmjs.org. The description does not name that host. can reach api.npmjs.org. The description does not name that host.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  src/knownBad.ts, line 79

  const res = await fetch(REMOTE_URL, { signal: AbortSignal.timeout(4000) });

  src/sarif.ts, line 111

  "js-dynamic-fetch-url": "Source uses fetch() with interpolated URL",

  src/rules/maintainerTrust.ts, line 67

  const res = await fetch(`${REGISTRY}/${encodePackageName(name)}`, { // fabrica-star-ignore - REGISTRY is a hardcoded constant

  Show more

  src/rules/npmHeuristics.ts, line 86

  const res = await fetch(`${REGISTRY_URL}/${encoded}`, { // fabrica-star-ignore - host is a hardcoded constant

  src/rules/npmHeuristics.ts, line 101

  const dlRes = await fetch(

  src/rules/osvCheck.ts, line 71

  const res = await fetch(`${OSV_API}/query`, { // fabrica-star-ignore - host is a hardcoded constant

  src/rules/provenanceCheck.ts, line 90

  const res = await fetch(`${REGISTRY}/${encodePackageName(name)}`, { // fabrica-star-ignore - REGISTRY is a hardcoded constant

  src/rules/provenanceCheck.ts, line 104

  const res = await fetch(url, { signal: AbortSignal.timeout(5000) });

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  src/rules/blastRadius.ts, line 39

  test: (p) => p.includes("/.aws/credentials") || p.includes("/.aws/config"),

  src/rules/blastRadius.ts, line 45

  test: (p, n) => n === "application_default_credentials.json" || p.includes("/.config/gcloud/"),

  src/rules/blastRadius.ts, line 49

  // .env files

  Show more

  src/rules/blastRadius.ts, line 51

  test: (_, n) => n === ".env" || n.startsWith(".env.") && !n.endsWith(".example") && !n.endsWith(".sample"),

  src/rules/blastRadius.ts, line 52

  reason: ".env file (may contain secrets)",

  src/rules/blastRadius.ts, line 71

  test: (p, n) => !isSystemPath(p) && (n === ".npmrc" || n === ".yarnrc"),

  src/rules/blastRadius.ts, line 77

  test: (_, n) => n === ".netrc",

  src/rules/blastRadius.ts, line 78

  reason: ".netrc (stores plaintext credentials for servers)",

• Agent instructions

  Serious

  instructions tell the agent to ignore earlier instructions.

  AGENT_IGNORE_INSTRUCTIONS

  README.md, line 206

  Detects: `eval()`, `new Function()`, shell injection via `exec`/`os.system`, `shell: true`, dynamically-interpolated fetch URLs, hardcoded API keys, prompt injection strings (`igno

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit b1eb241eb75f. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. can reach registry.npmjs.org. The description does not name that host. can reach api.npmjs.org. The description does not name that host. reads a credential or environment file. instructions tell the agent to ignore earlier instructions.

Date and source

Date checked: 24 Oct 2026

Read how this letter is chosen