registry / @argosvix/cli / 0.1.0-alpha.11

@argosvix/cli@0.1.0-alpha.11

Argosvix CLI — one-command onboarding for AI agent observability. `npx @argosvix/cli init` authenticates in the browser, installs the SDK, wires the MCP server, and sends a test event.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 53.0 KB of source, external domains: 127.0.0.1, d.example.com, dashboard.argosvix.com, ingest.argosvix.com

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * @argosvix/cli — agent-driven onboarding CLI.

4 *

5 * npx @argosvix/cli init Browser approval → scoped key issuance → SDK install +

6 * .env + MCP config + test event, all automatic

7 * npx @argosvix/cli login Re-authenticate and rewrite the key in .env

8 * npx @argosvix/cli doctor Setup diagnostics

9 *

10 * Zero-dep (Node built-ins only).

11 */

12import { createServer } from "node:http";

13import { spawn } from "node:child_process";

14import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L11

15/**

16 * Write files containing the API key as owner read/write only (0o600). Previously

17 * mcp.json / the Claude Desktop config / .env were written with default permissions

18 * (world-readable), letting other users on the same machine read the key. Since

19 * writeFileSync's mode never tightens permissions on an existing file, we also

20 * chmod after writing (a no-op on Windows).

21 */

22function writeSecretFile(path, content) {

23 writeFileSync(path, content, { encoding: "utf8", mode: 0o600 });

24 try {

25 chmodSync(path, 0o600);

26 }

27 catch {

28 /* chmod is unavailable on Windows / some filesystems — best-effort */

29 }

30}

31import { homedir, platform } from "node:os";

•matchType = previous_version_dangerous_delta matchedPackage = @argosvix/cli@0.1.0-alpha.9 matchedIdentity = npm:QGFyZ29zdml4L2NsaQ:0.1.0-alpha.9 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/index.jsView file

11*/ L12: import { createServer } from "node:http"; L13: import { spawn } from "node:child_process"; L14: import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"; ... L36: import { buildAuthorizeUrl, buildGateQuery, detectRuntime, ensureGitignoreEnv, installCommand, mergeMcpConfig, parsePackageVersion, resolveProjectFlag, upsertEnv, wrapSnippet, upse... L37: const API_BASE = process.env["ARGOSVIX_API_BASE"] ?? "https://ingest.argosvix.com"; L38: const DASHBOARD_BASE = process.env["ARGOSVIX_DASHBOARD_BASE"] ?? "https://dashboard.argosvix.com"; ... L41: // explicitly with ARGOSVIX_LOCALE). L42: const SYSTEM_LOCALE = Intl.DateTimeFormat().resolvedOptions().locale ?? "en"; L43: const LOCALE = process.env["ARGOSVIX_LOCALE"] ?? (SYSTEM_LOCALE.startsWith("ja") ? "ja" : "en"); ... L97: if (u.pathname !== callbackPath) { L98: res.writeHead(404).end("not found");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L11

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Findings

2 High3 Medium4 Low

HighSandbox Evasion Gated Capabilitydist/index.js

HighPrevious Version Dangerous Deltadist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * @argosvix/cli — agent-driven onboarding CLI.

4 *

5 * npx @argosvix/cli init Browser approval → scoped key issuance → SDK install +

6 * .env + MCP config + test event, all automatic

7 * npx @argosvix/cli login Re-authenticate and rewrite the key in .env

8 * npx @argosvix/cli doctor Setup diagnostics

9 *

10 * Zero-dep (Node built-ins only).

11 */

12import { createServer } from "node:http";

13import { spawn } from "node:child_process";

14import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L11

15/**

16 * Write files containing the API key as owner read/write only (0o600). Previously

17 * mcp.json / the Claude Desktop config / .env were written with default permissions

18 * (world-readable), letting other users on the same machine read the key. Since

19 * writeFileSync's mode never tightens permissions on an existing file, we also

20 * chmod after writing (a no-op on Windows).

21 */

22function writeSecretFile(path, content) {

23 writeFileSync(path, content, { encoding: "utf8", mode: 0o600 });

24 try {

25 chmodSync(path, 0o600);

26 }

27 catch {

28 /* chmod is unavailable on Windows / some filesystems — best-effort */

29 }

30}

31import { homedir, platform } from "node:os";

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg