registry / @donmai/core / 0.9.9

@donmai/core@0.9.9

Multi-agent fleet management for coding agents — orchestrator, providers, crash recovery

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 179 file(s), 1.28 MB of source, external domains: agentskills.io, docs.sigstore.dev, json-schema.org, registry.tessl.io

Source & flagged code

4 flagged

dist/src/tools/stdio-server.jsView file

Lines 1-36javascript

1/**

2 * MCP Stdio Server Abstraction Layer

3 *

4 * Converts ToolPlugin instances into standalone @modelcontextprotocol/sdk

5 * McpServer processes using stdio transport. This allows MCP clients like

6 * Codex to discover and invoke in-process tools (af_code_*, af_linear_*)

7 * through the standard MCP protocol over stdio.

8 *

9 * Architecture:

10 * ToolPlugin (in-process tools via @anthropic-ai/claude-agent-sdk)

11 * → StdioToolServer (standalone @modelcontextprotocol/sdk server)

12 * → Codex app-server (MCP client consuming tools)

13 *

14 * Each plugin becomes a separate stdio server child process so failures

15 * are isolated and Codex can manage them independently.

16 */

17import { spawn } from 'node:child_process';

18import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/src/tools/stdio-server.jsView on unpkg · L16

19import { dirname, join } from 'node:path';

20// ---------------------------------------------------------------------------

21// Registry Extension: Create stdio server configurations

22// ---------------------------------------------------------------------------

23/**

24 * Create stdio MCP server configurations from ToolPlugin instances.

25 *

26 * This does NOT spawn processes — it returns the configuration that

27 * the Codex app-server needs to register and spawn the servers itself

28 * via `config/batchWrite`.

29 *

30 * The server entry point is `packages/core/src/tools/stdio-server-entry.ts`

31 * which is compiled to `dist/src/tools/stdio-server-entry.js`.

32 */

33export function createStdioServerConfigs(plugins, context) {

34 const servers = [];

35 const allToolNames = [];

36 // Resolve path to the compiled server entry point

dist/src/deployment/deployment-checker.jsView file

Lines 1-28javascript

1/**

2 * Deployment Status Checker

3 *

4 * Queries GitHub commit status API for Vercel deployment state.

5 * Used to verify deployments before QA/acceptance work can proceed.

6 */

7import { exec } from 'child_process';

8import { promisify } from 'util';

9const execAsync

dist/src/tools/stdio-server-entry.jsView file

Lines 6-46javascript

6 * It receives a PluginBootstrap message on stdin, then starts an

7 * @modelcontextprotocol/sdk McpServer with stdio transport, exposing

8 * the plugin's tools to any MCP client (e.g. Codex app-server).

9 *

10 * Protocol:

11 * 1. Parent sends JSON

dist/src/workarea/local-pool.jsView file

Lines 553-593javascript

553 try {

554 rmSync(target, { recursive: true, force: true });

555 }

556 catch {

557 // Best-effort

558 }

559 }

560 }

561 // node_modules/.cache

Source & flagged code

4 flagged · loading source

dist/src/tools/stdio-server.jsView file

16*/ L17: import { spawn } from 'node:child_process'; L18: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/src/tools/stdio-server.jsView on unpkg · L16

dist/src/deployment/deployment-checker.jsView file

8import { promisify } from 'util'; L9: const execAsync = promisify(exec); L10: const DEFAULT_OPTIONS = {

High

Shell

Package source references shell execution.

dist/src/deployment/deployment-checker.jsView on unpkg · L8

dist/src/tools/stdio-server-entry.jsView file

26async function loadMcpSdk() { L27: const { McpServer } = await import('@[redacted].js'); L28: const { StdioServerTransport } = await import('@[redacted].js');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/src/tools/stdio-server-entry.jsView on unpkg · L26

dist/src/workarea/local-pool.jsView file

573* Install dependencies using the configured package manager. L574: * Runs pnpm/npm/yarn install --frozen-lockfile. L575: */ ... L579: 'yarn install --frozen-lockfile'; L580: execSync(cmd, { L581: cwd: worktreePath,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/workarea/local-pool.jsView on unpkg · L573

Findings

3 High4 Medium4 Low

HighChild Processdist/src/tools/stdio-server.js

HighShelldist/src/deployment/deployment-checker.js

HighRuntime Package Installdist/src/workarea/local-pool.js

MediumDynamic Requiredist/src/tools/stdio-server-entry.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/src/tools/stdio-server.jsView file

Lines 1-36javascript

1/**

2 * MCP Stdio Server Abstraction Layer

3 *

4 * Converts ToolPlugin instances into standalone @modelcontextprotocol/sdk

5 * McpServer processes using stdio transport. This allows MCP clients like

6 * Codex to discover and invoke in-process tools (af_code_*, af_linear_*)

7 * through the standard MCP protocol over stdio.

8 *

9 * Architecture:

10 * ToolPlugin (in-process tools via @anthropic-ai/claude-agent-sdk)

11 * → StdioToolServer (standalone @modelcontextprotocol/sdk server)

12 * → Codex app-server (MCP client consuming tools)

13 *

14 * Each plugin becomes a separate stdio server child process so failures

15 * are isolated and Codex can manage them independently.

16 */

17import { spawn } from 'node:child_process';

18import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

dist/src/tools/stdio-server.jsView on unpkg · L16

19import { dirname, join } from 'node:path';

20// ---------------------------------------------------------------------------

21// Registry Extension: Create stdio server configurations

22// ---------------------------------------------------------------------------

23/**

24 * Create stdio MCP server configurations from ToolPlugin instances.

25 *

26 * This does NOT spawn processes — it returns the configuration that

27 * the Codex app-server needs to register and spawn the servers itself

28 * via `config/batchWrite`.

29 *

30 * The server entry point is `packages/core/src/tools/stdio-server-entry.ts`

31 * which is compiled to `dist/src/tools/stdio-server-entry.js`.

32 */

33export function createStdioServerConfigs(plugins, context) {

34 const servers = [];

35 const allToolNames = [];

36 // Resolve path to the compiled server entry point

dist/src/deployment/deployment-checker.jsView file

Lines 1-28javascript

1/**

2 * Deployment Status Checker

3 *

4 * Queries GitHub commit status API for Vercel deployment state.

5 * Used to verify deployments before QA/acceptance work can proceed.

6 */

7import { exec } from 'child_process';

8import { promisify } from 'util';

9const execAsync

dist/src/tools/stdio-server-entry.jsView file

Lines 6-46javascript

6 * It receives a PluginBootstrap message on stdin, then starts an

7 * @modelcontextprotocol/sdk McpServer with stdio transport, exposing

8 * the plugin's tools to any MCP client (e.g. Codex app-server).

9 *

10 * Protocol:

11 * 1. Parent sends JSON

dist/src/workarea/local-pool.jsView file

Lines 553-593javascript

553 try {

554 rmSync(target, { recursive: true, force: true });

555 }

556 catch {

557 // Best-effort

558 }

559 }

560 }

561 // node_modules/.cache