← Back to search Server uses network capabilities via: fetch() Server uses filesystem capabilities via: fs, os Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: os.environ, process.env
AgentLair
Give AI agents a real @agentlair.dev email address and encrypted vault. Send/receive email.
? Not scanned yet
Versions
1.1.2latestfirst seen Jun 5, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 70
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 67 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: astro@5.14.5 (GHSA-2pvr-wf23-7pc7)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-4g3v-8h47-v7g6)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-7pw4-f3q4-r2p2)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-8hv8-536x-4wqp)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-f48w-9m4c-m7f5)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-fvmw-cj7j-j39q)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-g735-7g2w-hh3f)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-ggxq-hp9w-j794)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-hr2q-hp5q-x767)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-j687-52p2-xcff)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-jrpj-wcv7-9fh9)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-w2vj-39qv-7vh7)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-whqg-ppgf-wp8c)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-wrwg-2hg8-v723)
medium
Vulnerable dependency: astro@5.14.5 (GHSA-xr5h-phrj-8vxv)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-26pp-8wgv-hjvm)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-2gcr-mfcq-wcc3)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-3hrh-pfw6-9m5x)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-458j-xx4x-4375)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-54fx-42gc-7vw4)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-69xw-7hcm-h432)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-79qm-7rj5-m7r9)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-88fw-hqm2-52qc)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-8j4g-w8fx-2239)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-9vqf-7f2p-gf9v)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-f23p-vx2j-j53r)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-f577-qrjj-4474)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-hm8q-7f3q-5f36)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-hvrm-45r6-mjfj)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-j6c9-x7qj-28xf)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-p77w-8qqv-26rm)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-qp7p-654g-cw7p)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-r5rp-j6wh-rvv4)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-rv63-4mwf-qqc2)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-w62v-xxxg-mg59)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-wgpf-jwqj-8h8p)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-wmmm-f939-6g9c)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-wwfh-h76j-fc44)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xf4j-xp2r-rqqx)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xgm2-5f3f-mvvc)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xpcf-pg52-r92g)
medium
Vulnerable dependency: hono@4.12.8 (GHSA-xrhx-7g5j-rcj5)
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-52cp-r559-cp3m)
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-5p4m-2wfm-xmqj)
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-h67p-54hq-rp68)
medium
Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: @hono/node-server@1.19.0 (GHSA-92pp-h63x-v22m)
medium
Vulnerable dependency: @hono/node-server@1.19.0 (GHSA-frvp-7c67-39w9)
medium
Vulnerable dependency: @hono/node-server@1.19.0 (GHSA-wc8c-qw6v-h7f6)
medium
Hex string literal (>50 chars) in piiiico-agentlair-fc98878/packages/worker/src/caf.test.ts:59
medium
Hex string literal (>50 chars) in piiiico-agentlair-fc98878/packages/worker/src/caf.test.ts:70
medium
Hex string literal (>50 chars) in piiiico-agentlair-fc98878/packages/worker/src/audit.test.ts:456
medium
High-entropy string (5.86 bits/char) in piiiico-agentlair-fc98878/packages/worker/src/lib/base58btc.ts:8
info
package.json metadata
info
Transport: stdio
info
Required env vars (22)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 76 components
critical
AWS Access Key ID found in piiiico-agentlair-fc98878/packages/worker/src/assets/resvg-wasm-b64.ts
high
Authorization Bearer Token found in piiiico-agentlair-fc98878/examples/git-receipt/README.md
medium
No build provenance detected (SLSA L0)