registry / @aznex/worker / 0.1.7

@aznex/worker@0.1.7

Aznex local worker — captures coding-agent sessions, extracts memories via your Claude subscription, scrubs secrets, ships them to your team's Aznex service

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 21 file(s), 66.1 KB of source, external domains: registry.npmjs.org, www.apple.com

Source & flagged code

1 flagged

setup.tsView file

Lines 1-23typescript

1#!/usr/bin/env bun

2// aznex-worker setup — one-command developer install.

3//

4// aznex-worker setup --service-url https://aznex.up.railway.app [--api-key] [--agents claude-code]

5// aznex-worker setup --uninstall

6//

7// Everything in one shot: validates the service URL + API key against the

8// live service, writes ~/.aznex/config.json (0600 — the daemon can't see

9// shell env), installs the login daemon, wires the per-agent integration

10// (Claude Code: capture hooks + MCP registration), and smoke-tests the

11// worker. `curl <SERVICE_URL>/install.sh | bash` wraps this.

12import { dirname, join } from "path";

13import { homedir } from "os";

14import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from "fs";

15import { createInterface } from "readline/promises";

16import { CONFIG_PATH, loadWorkerConfig } from "./src/config.js";

17import { mergeClaudeSettings } from "./src/claude-settings.js";

18import { findClaude } from "./src/extract.js";

19import { browserAuth } from "./src/browser-auth.js";

20import { installDaemon, uninstallDaemon } from "./daemon/install.js";

21import { LOG_FILE } from "./daemon/templates.js";

23const CLAUDE_SETTINGS = join(homedir(), ".claude", "settings.json");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

setup.tsView on unpkg · L3

Source & flagged code

1 flagged · loading source

setup.tsView file

3// L4: // aznex-worker setup --service-url https://aznex.up.railway.app [--api-key] [--agents claude-code] L5: // aznex-worker setup --uninstall ... L22: L23: const CLAUDE_SETTINGS = join(homedir(), ".claude", "settings.json"); L24: ... L51: async function ask(question: string): Promise<string> { L52: const rl = createInterface({ input: process.stdin, output: process.stdout }); L53: const answer = (await rl.question(question)).trim(); ... L165: const existing = existsSync(CLAUDE_SETTINGS) L166: ? (JSON.parse(readFileSync(CLAUDE_SETTINGS, "utf-8")) as Record<string, unknown>) L167: : {};

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

setup.tsView on unpkg · L3

Findings

3 Medium4 Low

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesetup.ts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

1 flagged

setup.tsView file

Lines 1-23typescript

1#!/usr/bin/env bun

2// aznex-worker setup — one-command developer install.

3//

4// aznex-worker setup --service-url https://aznex.up.railway.app [--api-key] [--agents claude-code]

5// aznex-worker setup --uninstall

6//

7// Everything in one shot: validates the service URL + API key against the

8// live service, writes ~/.aznex/config.json (0600 — the daemon can't see

9// shell env), installs the login daemon, wires the per-agent integration

10// (Claude Code: capture hooks + MCP registration), and smoke-tests the

11// worker. `curl <SERVICE_URL>/install.sh | bash` wraps this.

12import { dirname, join } from "path";

13import { homedir } from "os";

14import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from "fs";

15import { createInterface } from "readline/promises";

16import { CONFIG_PATH, loadWorkerConfig } from "./src/config.js";

17import { mergeClaudeSettings } from "./src/claude-settings.js";

18import { findClaude } from "./src/extract.js";

19import { browserAuth } from "./src/browser-auth.js";

20import { installDaemon, uninstallDaemon } from "./daemon/install.js";

21import { LOG_FILE } from "./daemon/templates.js";

23const CLAUDE_SETTINGS = join(homedir(), ".claude", "settings.json");

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

setup.tsView on unpkg · L3