registry / @argosvix/cli / 0.1.0-alpha.7

@argosvix/cli@0.1.0-alpha.7

Argosvix CLI — one-command onboarding for AI agent observability. `npx @argosvix/cli init` authenticates in the browser, installs the SDK, wires the MCP server, and sends a test event.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 44.9 KB of source, external domains: 127.0.0.1, d.example.com, dashboard.argosvix.com, ingest.argosvix.com

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * @argosvix/cli — エージェント主導オンボーディング CLI。

4 *

5 * npx @argosvix/cli init ブラウザ承認 → scoped キー発行 → SDK install +

6 * .env + MCP 設定 + テストイベントまで自動

7 * npx @argosvix/cli login 再認証して .env にキーを入れ直す

8 * npx @argosvix/cli doctor セットアップ診断

9 *

10 * 設計 = docs/handoff/cli-init-design.md v2。 zero-dep (Node 組み込みのみ)。

11 */

12import { createServer } from "node:http";

13import { spawn } from "node:child_process";

14import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L11

15/**

16 * API キーを含むファイルを所有者のみ読み書き(0o600)で書く。監査 2026-06-28 =

17 * mcp.json / Claude Desktop config / .env を既定パーミッション(world-readable)で

18 * 書いており、同一マシンの他ユーザーがキーを読めた。 writeFileSync の mode は既存

19 * ファイルのパーミッションを下げないため、書き込み後に chmod も行う(Windows では no-op)。

20 */

21function writeSecretFile(path, content) {

22 writeFileSync(path, content, { encoding: "utf8", mode: 0o600 });

23 try {

24 chmodSync(path, 0o600);

25 }

26 catch {

27 /* Windows / 一部 FS では chmod 不可 = best-effort */

28 }

29}

30import { homedir, platform } from "node:os";

31import { dirname, join } from "node:path";

•matchType = previous_version_dangerous_delta matchedPackage = @argosvix/cli@0.1.0-alpha.6 matchedIdentity = npm:QGFyZ29zdml4L2NsaQ:0.1.0-alpha.6 similarity = 0.400 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/index.jsView file

11*/ L12: import { createServer } from "node:http"; L13: import { spawn } from "node:child_process"; L14: import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"; ... L35: import { buildAuthorizeUrl, buildGateQuery, detectRuntime, ensureGitignoreEnv, installCommand, mergeMcpConfig, resolveProjectFlag, upsertEnv, wrapSnippet, } from "./project.js"; L36: const API_BASE = process.env["ARGOSVIX_API_BASE"] ?? "https://ingest.argosvix.com"; L37: const DASHBOARD_BASE = process.env["ARGOSVIX_DASHBOARD_BASE"] ?? "https://dashboard.argosvix.com"; ... L39: // ロケールに追従 (日本語環境で /en に飛ばされる不整合の解消。ARGOSVIX_LOCALE で明示上書き可)。 L40: const SYSTEM_LOCALE = Intl.DateTimeFormat().resolvedOptions().locale ?? "en"; L41: const LOCALE = process.env["ARGOSVIX_LOCALE"] ?? (SYSTEM_LOCALE.startsWith("ja") ? "ja" : "en"); ... L95: if (u.pathname !== callbackPath) { L96: res.writeHead(404).end("not found");

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L11

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

Findings

2 High3 Medium4 Low

HighSandbox Evasion Gated Capabilitydist/index.js

HighPrevious Version Dangerous Deltadist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

dist/index.jsView file

Lines 1-31javascript

1#!/usr/bin/env node

2/**

3 * @argosvix/cli — エージェント主導オンボーディング CLI。

4 *

5 * npx @argosvix/cli init ブラウザ承認 → scoped キー発行 → SDK install +

6 * .env + MCP 設定 + テストイベントまで自動

7 * npx @argosvix/cli login 再認証して .env にキーを入れ直す

8 * npx @argosvix/cli doctor セットアップ診断

9 *

10 * 設計 = docs/handoff/cli-init-design.md v2。 zero-dep (Node 組み込みのみ)。

11 */

12import { createServer } from "node:http";

13import { spawn } from "node:child_process";

14import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L11

15/**

16 * API キーを含むファイルを所有者のみ読み書き(0o600)で書く。監査 2026-06-28 =

17 * mcp.json / Claude Desktop config / .env を既定パーミッション(world-readable)で

18 * 書いており、同一マシンの他ユーザーがキーを読めた。 writeFileSync の mode は既存

19 * ファイルのパーミッションを下げないため、書き込み後に chmod も行う(Windows では no-op)。

20 */

21function writeSecretFile(path, content) {

22 writeFileSync(path, content, { encoding: "utf8", mode: 0o600 });

23 try {

24 chmodSync(path, 0o600);

25 }

26 catch {

27 /* Windows / 一部 FS では chmod 不可 = best-effort */

28 }

29}

30import { homedir, platform } from "node:os";

31import { dirname, join } from "node:path";

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg