registry / @kairyou/agent-tools / 0.1.0

@kairyou/agent-tools@0.1.0

Skills and runtime integrations for Codex, Claude Code, and opencode.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 78.2 KB of source, external domains: api.anthropic.com, api.openai.com

Source & flagged code

3 flagged

statusline/claude/statusline.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// Claude Code statusLine script (agent-tools).

3// Reads session JSON from stdin and prints one compact status line.

4//

5// Default:

6// ⎇ main | Opus 4.8 | 5h 7% ⟳2h54m | w 41% ⟳3d1h

7//

8// Customize with either:

9// node statusline.mjs --fields branch,model,fiveHour,week

10// AGENT_TOOLS_STATUSLINE_FIELDS=branch,model,context

11// ~/.agent-tools/config.jsonc

13import { execFileSync, spawn } from "node:child_process";

14import fs from "node:fs";

High

Child Process

Package source references child process execution.

statusline/claude/statusline.mjsView on unpkg · L12

15import { basename, dirname, join } from "node:path";

16import { fileURLToPath } from "node:url";

18const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url));

19const AGENT_TOOLS_HOME = process.env.AGENT_TOOLS_HOME || join(SCRIPT_DIR, "..", "..");

20const DEFAULT_CONFIG_FILE = join(AGENT_TOOLS_HOME, "config.jsonc");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

statusline/claude/statusline.mjsView on unpkg · L12

21const SNAPSHOT_FILE = join(AGENT_TOOLS_HOME, "cache", "usage-snapshot.json");

22const REFRESH_STATE_FILE = join(AGENT_TOOLS_HOME, "cache", "usage-refresh-state.json");

23const USAGE_RUNTIME = join(AGENT_TOOLS_HOME, "lib", "usage.mjs");

24const DEFAULT_SNAPSHOT_TTL_MS = 60_000;

25const DEFAULT_REFRESH_COOLDOWN_MS = 30_000;

26const DEFAULT_FAILURE_BACKOFF_MS = 120_000;

28const DEFAULT_CONFIG = {

29 fields: ["branch", "model", "fiveHour", "week"],

30 separator: " | ",

31 symbols: {

32 branch: "⎇",

lib/usage.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// Agent usage runtime (agent-tools).

3// Reads the active provider, probes known gateway usage endpoints, and prints a

4// compact balance/quota message. Fails open when provider usage cannot be fetched.

6import { readFile, writeFile, mkdir } from "node:fs/promises";

7import { existsSync } from "node:fs";

8import { dirname, join } from "node:path";

Source & flagged code

3 flagged · loading source

statusline/claude/statusline.mjsView file

12L13: import { execFileSync, spawn } from "node:child_process"; L14: import fs from "node:fs";

High

Child Process

Package source references child process execution.

statusline/claude/statusline.mjsView on unpkg · L12

12Cross-file remote execution chain: statusline/claude/statusline.mjs spawns lib/usage.mjs; helper contains network access plus dynamic code execution. L12: L13: import { execFileSync, spawn } from "node:child_process"; L14: import fs from "node:fs"; ... L18: const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url)); L19: const AGENT_TOOLS_HOME = process.env.AGENT_TOOLS_HOME || join(SCRIPT_DIR, "..", ".."); L20: const DEFAULT_CONFIG_FILE = join(AGENT_TOOLS_HOME, "config.jsonc"); ... L56: for await (const chunk of process.stdin) chunks.push(chunk); L57: return Buffer.concat(chunks).toString("utf8"); L58: } ... L213: function renderField(field, data, config) { L214: const dir = data?.workspace?.current_dir || data?.cwd || process.cwd() || ""; L215: const projectDir = data?.workspace?.project_dir || dir;

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

statusline/claude/statusline.mjsView on unpkg · L12

lib/usage.mjsView file

12L13: const CODEX_HOME = process.env.CODEX_HOME || join(homedir(), ".codex"); L14: const AGENT_TOOLS_HOME = process.env.AGENT_TOOLS_HOME || join(homedir(), ".agent-tools"); ... L66: if (message) payload.systemMessage = message; L67: process.stdout.write(`${JSON.stringify(payload)}\n`); L68: } ... L196: async function readJson(path) { L197: return JSON.parse(await readFile(path, "utf8")); L198: } ... L314: return [ L315: "https://api.openai.com", L316: "https://api.openai.com/v1",

Medium

Unsafe Vm Context

Package source executes code through a VM context API.

lib/usage.mjsView on unpkg · L12

Findings

3 High3 Medium4 Low

HighChild Processstatusline/claude/statusline.mjs

HighShell

HighCross File Remote Execution Contextstatusline/claude/statusline.mjs

MediumUnsafe Vm Contextlib/usage.mjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

statusline/claude/statusline.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// Claude Code statusLine script (agent-tools).

3// Reads session JSON from stdin and prints one compact status line.

4//

5// Default:

6// ⎇ main | Opus 4.8 | 5h 7% ⟳2h54m | w 41% ⟳3d1h

7//

8// Customize with either:

9// node statusline.mjs --fields branch,model,fiveHour,week

10// AGENT_TOOLS_STATUSLINE_FIELDS=branch,model,context

11// ~/.agent-tools/config.jsonc

13import { execFileSync, spawn } from "node:child_process";

14import fs from "node:fs";

High

Child Process

Package source references child process execution.

statusline/claude/statusline.mjsView on unpkg · L12

15import { basename, dirname, join } from "node:path";

16import { fileURLToPath } from "node:url";

18const SCRIPT_DIR = dirname(fileURLToPath(import.meta.url));

19const AGENT_TOOLS_HOME = process.env.AGENT_TOOLS_HOME || join(SCRIPT_DIR, "..", "..");

20const DEFAULT_CONFIG_FILE = join(AGENT_TOOLS_HOME, "config.jsonc");

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

statusline/claude/statusline.mjsView on unpkg · L12

21const SNAPSHOT_FILE = join(AGENT_TOOLS_HOME, "cache", "usage-snapshot.json");

22const REFRESH_STATE_FILE = join(AGENT_TOOLS_HOME, "cache", "usage-refresh-state.json");

23const USAGE_RUNTIME = join(AGENT_TOOLS_HOME, "lib", "usage.mjs");

24const DEFAULT_SNAPSHOT_TTL_MS = 60_000;

25const DEFAULT_REFRESH_COOLDOWN_MS = 30_000;

26const DEFAULT_FAILURE_BACKOFF_MS = 120_000;

28const DEFAULT_CONFIG = {

29 fields: ["branch", "model", "fiveHour", "week"],

30 separator: " | ",

31 symbols: {

32 branch: "⎇",

lib/usage.mjsView file

Lines 1-32javascript

1#!/usr/bin/env node

2// Agent usage runtime (agent-tools).

3// Reads the active provider, probes known gateway usage endpoints, and prints a

4// compact balance/quota message. Fails open when provider usage cannot be fetched.

6import { readFile, writeFile, mkdir } from "node:fs/promises";

7import { existsSync } from "node:fs";

8import { dirname, join } from "node:path";