Sink boundary: A cryptographic primitive is modeled because its strength may not meet the security property required by the caller.
The pack does not provide a callable signature for this record; the watched access path is shown directly.
No positional argument is specified; inspect the return value or named access path in the model facts below.
CWE-338 ↗
Cryptographically Weak PRNG
A non-cryptographic pseudo-random generator is used for security-sensitive values.
Attacker's-eye view · weak-crypto
An attacker exploits weak hashing, encryption, or protocol choices to recover or forge values.
// modeled boundary: ReturnValue
pseudoRandomBytes(attacker_influenced_value);
1Identify the property the primitive is meant to provide.
2Use current, reviewed algorithms and parameters.
3Check key, nonce, and mode handling.
These checks require the surrounding codebase. The model names the boundary; it does not decide reachability or prove that a guard dominates every path.
Is this a bug in your code?Atropos stops here — by design
Atropos identifies ReturnValue as a weak-crypto sink. It cannot see whether untrusted data reaches this call in your repository.
Lachesis is the codebase-level step: it traces reachability and guards for this symbol.
Check this symbol in Lachesis →Across languages
●RAND_pseudo_bytesc●drand48c●erand48c●g_rand_booleanc●g_rand_doublec●g_rand_double_rangecWhat neutralizes it
No sanitizer of this kind is modeled.
Model facts · verbatim from the pack
| Role | Kind | Access path | Model ID | Confidence |
|---|---|---|---|---|
| sink | weak-crypto | ReturnValue | typescript.crypto.pseudorandombytes.ret | medium · corrob. 2 |