registry / @dharmiklathiya/codesentinel_ai / 0.1.1

@dharmiklathiya/codesentinel_ai@0.1.1

AI-powered code review, fix, audit, scoring, and test generation engine with multi-provider model support.

Static Scan Results

scanned 39m ago · by rust-scanner

Static analysis flagged 13 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 29 file(s), 150 KB of source, external domains: api.github.com

Source & flagged code

4 flagged

dist/utils/git.jsView file

Lines 1-21javascript

1import { execFile } from "node:child_process";

2import { promisify } from "node:util";

High

Child Process

Package source references child process execution.

dist/utils/git.jsView on unpkg · L1

3import { logger } from "./logger.js";

4const exec = promisify(execFile);

5/** Run a git command in the given cwd, returning stdout. */

6export async function git(args, cwd = process.cwd()) {

7 const { stdout } = await exec("git", args, { cwd, maxBuffer: 64 * 1024 * 1024 });

8 return stdout;

10/**

11 * Collect the changed files for the current PR/branch relative to a base ref.

12 * Falls back to the working tree diff when no base ref is supplied and no

13 * upstream branch is configured.

14 */

15export async function collectDiff(base, cwd = process.cwd()) {

16 const baseRef = base || (await defaultBaseRef(cwd));

17 let nameStatus;

18 try {

19 nameStatus = await git(["diff", "--name-status", "--no-renames", baseRef + "..."], cwd);

20 }

21 catch (err) {

dist/analyzer/index.jsView file

Lines 73-113javascript

73 });

74 }

75 // 2. console.log left in source (smell, not for tests).

76 if (/\bconsole\.(log|debug)\(/.test(line) && !path.

dist/plugins/index.jsView file

Lines 1-34javascript

1/**

2 * PluginManager loads plugin modules (from config.plugins) and dispatches

3 * lifecycle hooks. Modules must default-export a CodeSentinelPlugin.

4 */

5export class PluginManager {

6 ctx;

7 plugins = [];

dist/engine/index.jsView file

Lines 217-257javascript

217 { role: "user", content: prompt },

218 ]);

219 const parsed = extractJson(res.content);

220 let verified = false;

Source & flagged code

4 flagged · loading source

dist/utils/git.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code