registry / @co0ontty/wand / 4.18.3

@co0ontty/wand@4.18.3

⚠ Under review

A web console for Claude Code, Codex, OpenCode, and other local CLI tools.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis flagged 18 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 91 file(s), 3.74 MB of source, external domains: api.anthropic.com, api.example.com, api.openai.com, github.com, home.huniu.fun, react.dev, www.apple.com, www.w3.org

Source & flagged code

9 flagged

dist/config.jsView file

Lines 35-75javascript

35 "commitModel",

36 "commitAiSource",

37 "systemAi",

38 "defaultThinkingEffort",

39 "structuredRunner",

40 "language",

41 "cardDefaults",

42 "inheritEnv",

43];

44const PREFERENCE_KEY_SET = new Set(PREFERENCE_KEYS);

45function preferenceStorageKey(key) {

46 return `pref:${key}`;

47}

48export function isPreferenceKey(key) {

49 return PREFERENCE_KEY_SET.has(key);

50}

51export const defaultConfig = () => ({

52 host: "127.0.0.1",

53 port: 8443,

54 https: false,

55 password: "change-me",

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/config.jsView on unpkg · L55

56 defaultProvider: "claude",

57 defaultSessionKind: "structured",

58 // 非 root 启动时才有资格用 Claude 的 permission-bypass（root 会被 Claude CLI 拒绝），

59 // 所以这种环境下把默认执行模式抬到「托管」——开箱即得自动确认权限的全自主体验。

60 // root 启动则保守回落到「default」（托管在 root 下也只能降级成 acceptEdits）。

61 // 注意：defaultMode 是偏好字段，只存 SQLite、不写 config.json（见 stripPreferenceFields），

62 // 这里仅作为「用户从未在设置里显式选过模式」时的回落值——显式选择始终优先。

63 defaultMode: isRunningAsRoot() ? "default" : "managed",

64 shell: process.env.SHELL || "/bin/bash",

65 defaultCwd: process.cwd(),

66 startupCommands: [],

67 allowedCommandPrefixes: [],

68 shortcutLogMaxBytes: 10 * 1024 * 1024,

69 language: "",

70 android: defaultAndroidApkConfig(),

71 macos: defaultMacosDmgConfig(),

72 cardDefaults: defaultCardExpandDefaults(),

73 defaultModel: "",

74 defaultCodexModel: "",

75 defaultOpenCodeModel: "",

dist/structured-codex-adapter.jsView file

Lines 1-21javascript

1import { spawn } from "node:child_process";

2import { CodexProtocolReducer } from "./structured-codex-protocol.js";

High

Child Process

Package source references child process execution.

dist/structured-codex-adapter.jsView on unpkg · L1

3import { thinkingEffortToCodexReasoningEffort } from "./structured-provider-common.js";

dist/git-utils.jsView file

Lines 14-54javascript

14 GIT_ASKPASS: "true",

15 GCM_INTERACTIVE: "never",

16 SSH_ASKPASS_REQUIRE: "never",

17 GIT_EDITOR: "true",

18 GIT_SEQUENCE_EDITOR:

dist/tui/layout.jsView file

Lines 1-22javascript

1import { createRequire } from "node:module";

2import { stripAnsi } from "../pty-text-utils.js";

3const require = createRequire(import.meta.url);

dist/password-manager.jsView file

Lines 1-21javascript

1import crypto from "node:crypto";

2export const DEFAULT_BROWSER_EXTENSION_BASE_URL = "https://home.huniu.fun:8183";

3export const DEFAULT_PASSWORD_VAULT_ID = "personal"

dist/tui/commands.jsView file

Lines 1-24javascript

1/**

2 * TUI 运维操作命令集合。

3 *

4 * 所有命令统一返回 CommandResult，UI 层负责把结果渲染到 toast / 弹窗 / 日志。

5 * 命令本身不直接写 stdout / stderr —— TUI 模式下 stderr 已经被 log-bus 劫持。

6 */

7import { spawn, spawnSync } from "node:child_process";

8import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync, unlinkSync } from

dist/server.jsView file

Lines 1-25javascript

1import crypto from "node:crypto";

2import compression from "compression";

3import express from "express";

4import { existsSync, readFileSync } from "node:fs";

Source & flagged code

9 flagged · loading source

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code