registry / @kodax-ai/kodax / 0.7.67

@kodax-ai/kodax@0.7.67

⚠ Under review

KodaX lightweight coding agent - TypeScript implementation with 15 built-in LLM provider aliases, published as a Node-free single-file CLI and SDK

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 58 file(s), 3.43 MB of source, external domains: 127.0.0.1, api.example.com, evil.com, github.com

Oversized source lightweight scan

dist/kodax_cli.js2.55 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsDynamicRequireHighEntropyStringsMinified

dist/runtime-worker.js2.43 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsHighEntropyStringsMinified

Source & flagged code

9 flagged

dist/semantic-worker.jsView file

Lines 163-193javascript

163}

164

165process.stdin.setEncoding('utf8');

166process.stdin.on('data', (chunk) => {

167 buffer += chunk;

168 while (true) {

169 const lineEnd = buffer.indexOf('\n');

170 if (lineEnd < 0) {

171 return;

172 }

173 const line = buffer.slice(0, lineEnd).replace(/\r$/, '').trim();

174 buffer = buffer.slice(lineEnd + 1);

175 if (line) {

176 handleFrame(line);

177 }

178 }

179});

180

181process.on('SIGTERM', () => process.exit(0));

182process.on('SIGINT', () => process.exit(0));

183`});var Sc=O(()=>{"use strict";Ut();zo();qo();Wo();Ao();En();Mo();wc();Pc()});async function xp(t,e,n){let r=kc("label");return await t.append({id:r,ts:Date.now(),type:"label",payload:{targetId:e,label:n}}),r}async function Tp(t,e,n){let r=kc("artifact");return await t.append({id:r,ts:Date.now(),type:"artifact_ledger",payload:{ref:e,summary:n}}),r}function vp(t){let e=[],n=new Map,r=[],o=null;for(let i of t){if(i.type==="label"){let c=i.payload;c?.targetId&&r.push({targetId:c.targetId,label:c.label});continue}let s={entry:i,children:[]};if(i.type==="message"){e.push(s),n.set(i.id,s),o=s;contin ...

184`,"utf8"),await tm(r,t)}catch(o){throw await Ae.rm(r,{force:!0}).catch(()=>{}),o}await nm(n,ei.basename(t)).catch(()=>{})}async function nm(t,e){let n=`${e}.`,r

185`)}let c=0,l=!1,u=i;for(let d=i;d<t.length;d+=1){let p=t[d]??"";if(c+=de(p),p.includes("{")&&(l=!0),u=d,l&&c<=0&&d>i||!l&&d+1>=s)break}let f=l?u+1:s;return t.slice(i,f).join(`

High

Child Process

Package source references child process execution.

dist/semantic-worker.jsView on unpkg · L183

186`)}function fy(t){let e=new Set,n=[/\b([A-Za-z_][A-Za-z0-9_]*)\s*\(/g,/\.([A-Za-z_][A-Za-z0-9_]*)\s*\(/g];for(let r of n){let o=null;for(;(o=r.exec(t))!==null;){let i=o[1];if(!(!i||pe.has(i))&&(e.add(i),e.size>=24))break}}return Array.from(e)}function L(t,e,n){let r=`${n.line}:${n.kind}:${n.name}`;e.has(r)||(e.add(r),t.push(n))}function Oy(t,e){let n=[],r=new Set,o=[],i=[],s=[],c=0;for(let[l,u]of t.entries()){let f=u.trim();if(!f)continue;let d=null;if(e==="typescript"||e==="javascript"){if(d=/^(export\s+)?(?:async\s+)?function\s+([A-Za-z_$][A-Za-z0-9_$]*)\s*\(/.exec(f),d){L(n,r,{name:d[2],kin ...

187`,n);return t.text.slice(n,r===-1?void 0:r).trim()||e.getText(t).split(/\r?\n/,1)[0]?.trim()||"<unknown>"}function Ui(t,e){return $.canHaveModifiers(t)?!!$.

188`)}function Iy(t){let{symbol:e}=t;return[`Symbol context for ${e.name}`,`Definition: ${e.filePath}:${e.line}`,`Module: ${e.moduleId} | Kind: ${e.kind} | Exported: ${e.exported?"yes":"no"}`,`Language: ${e.language}/${e.capabilityTier}`,`Freshness: ${t.freshness}`,`Confidence: ${kr(t.confidence)} (${t.confidence.toFixed(2)})`,`Signature: ${e.signature}`,`Possible callees: ${e.callTargets.map(n

189`)}function My(t){let{process:e}=t;return[`Process context for ${e.label}`,`Module: ${e.moduleId}`,`Entry: ${e.entryFile}${e.entrySymbol?` -> ${e.entrySymbol}`:""}`,`Freshness: ${t.freshness}`

190`)}function Wy(t){return[`Impact estimate for ${t.target.label}`,`Target: ${t.target.kind}${t.target.moduleId?` | module=${t.target.moduleId}`:""}${t.target.filePath?` | file=${t.target

191`)}var Jd=O(()=>{"use strict";a(kr,"confidenceLabel");a(br,"capabilityLines");a(Ay,"renderModuleContext");a(Iy,"renderSymbolContext");a(My,"renderProcessContext");a(Wy,"renderImpactEstimate")});function zy(t){let e=0,n=new Map,r=new Map,o=new Set,i=[],s=[],c=a(l=>{n.set(l,e),r.set(l,e),e++,i.push(l),o.add(l);for(let u of t.get(l)??[])n.has(u)?o.has(u)&&r.set(l,Math.min(r.get(l)??0,n.get(u)??0)):(c(u),r.set(l,Math.min(r.get(l)??0,r.get(u)??0)));if((r.get(l)??0)===(n.get(l)??0)){let u=[],f="";do f=i.pop()??"",o.delete(f),u.push(f);while(f!==l&&i.length>=0&&f!=="");s.push(u)}},"strongconnect");fo ...

192`)}var eu=O(()=>{"use strict";a(zy,"tarjanScc");a(qy,"severityFor");a(jy,"findCyclicDependencies");a(Fy,"renderCycleAnalysis")});var tu={};ls(tu,{buildCompleteInputsFromSourceStates:()=>Ki,buildFreshnessLabel:()=>Tt,buildIncrementalAnalysisEntries:()=>Bi,buildRepoIntelligenceIndex:()=>ky,buildRepoIntelligenceIndexFromInputs:()=>Li,canDirectReuseCleanCachedQueryIndex:()=>zd,canDirectReuseDirtyCachedQueryIndex:()=>qd,classifyChangedOrNewSourceFiles:()=>Zi,collectCallers:()=>Qr,collectSemanticLookupItems:()=>Cy,deriveReviewScale:()=>Nd,deriveRoutingComplexity:()=>Yd,findCyclicDependencies:()=>jy, ...

193

Long lines were clipped for display.

dist/chunks/chunk-RS2GAABJ.jsView file

Lines 101-141javascript

101- If the user confirms, call \`set_permission_mode\` with \`mode: "accept-edits"\` to switch to implementation mode

102- If the user declines, stay in plan mode \u2014 do NOT call \`set_permission_mode\`

103

104## Asking User Questions

105

106When you need the user to make decisions, use \`ask_user_question\`.

107- For **multiple independent questions**, use the \`

dist/constructed-handler-worker.jsView file

Lines 1-3javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2var w=Object.defineProperty;var l=(o,t)=>w(o,"name",{value:t,configurable:!0});import{parentPort as f,workerData as b}from"node:worker_threads";function d(o){

dist/chunks/chunk-WCSSXBHR.jsView file

Lines 191-231javascript

191 - Allow (no) if the action is consistent with the user's stated intent and project rules, even if it mutates state inside the project.

192 - When uncertain, err toward block \u2014 false positives are recoverable (the agent can adapt), false negatives may not be.

193

194About <signals> (when present):

195 - Signals are mechanical pattern matches over the action

dist/chunks/chunk-YH5BTUQO.jsView file

317`)}catch(n){return`[Tool Error] activate_agent: ${n.message}`}}i(xp,"toolActivateAgent");var ir=Object.freeze({web_search:'Discover web content when no specific URL is known \u2014... L318: `)}i(Tx,"buildResult");var Sx=i(async(e,t)=>{let n=e,r=typeof n.query=="string"?n.query:"";if(r.length===0)return"tool_search: `query` is required. Forms: `select:NAME[,NAME...]` f... L319:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/chunk-YH5BTUQO.jsView on unpkg · L317

dist/chunks/chunk-QI6SQ2UQ.jsView file

1Cross-file remote execution chain: dist/chunks/chunk-QI6SQ2UQ.js spawns dist/chunks/chunk-YH5BTUQO.js; helper contains network access plus dynamic code execution. L1: // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024. L2: import{$ as Dc,A as Gw,Aa as Xm,B as Ks,Ba as mT,C as Td,D as Vw,Da as qm,E as $c,Ea as Pd,F as Vm,Fa as hT,G as zw,Ga as gT,H as Km,I as Ro,J as Cd,K as zs,L as Id,M as bd,N as Yw... L3: `).length,i={width:n,height:r};return ET.set(e,i),i},"measureText"),rh=xA;import SA from"wrap-ansi";import wA from"cli-truncate";var MT={},TA=o((e,t,n)=>{let r=e+String(t)+String(n... ... L12: `).repeat($);h&&(H=Xd.dim(H));let U=(ur(a.right,f,"foreground")+` L13: `).repeat($);S&&(U=Xd.dim(U));let W=R?ur((T?a.bottomLeft:"")+a.bottom.repeat(M)+(w?a.bottomRight:""),l,"foreground"):void 0;R&&m&&(W=Xd.dim(W));let J=C?1:0;P&&r.write(e,t,P,{transf... L14: `.repeat(i)+JA(t,r)}return t},"applyPaddingToText"),Jd=o((e,t={})=>{if(t.sk[redacted]&&e.internal_static||e.yogaNode?.getDisplay()===Do.DISPLAY_NONE)return"";let n="";if(e.no... ... L20: `:"",frame:void 0}}let r=new ta({width:e.yogaNode.getComputedWidth(),height:e.yogaNode.getComputedHeight()});zT(),fh(e,r,{…

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-QI6SQ2UQ.jsView on unpkg · L1

dist/runtime-worker.jsView file

•path = dist/runtime-worker.js kind = oversized_source_file sizeBytes = 2548202 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime-worker.jsView on unpkg

dist/kodax_cli.jsView file

•path = dist/kodax_cli.js kind = oversized_cli_entrypoint sizeBytes = 2672351 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/kodax_cli.jsView on unpkg

Source & flagged code

9 flagged · loading source

dist/semantic-worker.jsView file

183`});var Sc=O(()=>{"use strict";Ut();zo();qo();Wo();Ao();En();Mo();wc();Pc()});async function xp(t,e,n){let r=kc("label");return await t.append({id:r,ts:Date.now(),type:"label",payl... L184: `,"utf8"),await tm(r,t)}catch(o){throw await Ae.rm(r,{force:!0}).catch(()=>{}),o}await nm(n,ei.basename(t)).catch(()=>{})}async function nm(t,e){let n=`${e}.`,r=Date.now(),o=await ... L185: `)}let c=0,l=!1,u=i;for(let d=i;d<t.length;d+=1){let p=t[d]??"";if(c+=de(p),p.includes("{")&&(l=!0),u=d,l&&c<=0&&d>i||!l&&d+1>=s)break}let f=l?u+1:s;return t.slice(i,f).join(`

High

Child Process

Package source references child process execution.

dist/semantic-worker.jsView on unpkg · L183

dist/chunks/chunk-RS2GAABJ.jsView file

121`)}i(wo,"buildSelfKnowledgeRoutingRule");var Df=wo();var bi=["EXECUTION GUIDANCE (match your approach to the kind of work \u2014 judge which fits):","- Respond in the primary natur... L122: `);var xi="[Tool Construction Mode]\nYou may build a new tool at runtime when an existing builtin or extension does not solve the user's task and a thin reusable handler would. Wal... L123: `):t.hints.length===0?e:[e,"","Task-relevant memory hints (bounded):",...t.hints.map(Tl),"","Use these as pointers, not authority. If a hint matters, read the referenced memory fil...

High

Eval

Package source references dynamic code evaluation.

dist/chunks/chunk-RS2GAABJ.jsView on unpkg · L121

dist/constructed-handler-worker.jsView file

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024. L2: var w=Object.defineProperty;var l=(o,t)=>w(o,"name",{value:t,configurable:!0});import{parentPort as f,workerData as b}from"node:worker_threads";function d(o){let t=o instanceof Err...

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/constructed-handler-worker.jsView on unpkg · L1

dist/chunks/chunk-WCSSXBHR.jsView file

211`;)d+=1;continue}if(u==="/"&&f==="*"){for(d+=2;d<e.length&&!(e[d]==="*"&&e[d+1]==="/");)d+=1;d+=2;continue}break}if(e[d]==="]"||e[d]==="}"){r+=1;continue}}t+=c,r+=1}return t}o(Mm,"... L212: \u2026[truncated]\u2026`;function Lm(e,t={}){let r=t.maxToolResultBytes??2048,n=t.maxTranscriptBytes??8192,i=[];for(let s of e){let c=$m(s,r);c!==null&&i.push(c)}return Um(i,n)}o(L... L213: # Claude Code Code Bash command prefix detection

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/chunk-WCSSXBHR.jsView on unpkg · L211

•Trigger-reachable chain: manifest.main -> dist/index.js -> dist/chunks/chunk-WCSSXBHR.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/chunks/chunk-WCSSXBHR.jsView on unpkg

dist/chunks/chunk-YH5BTUQO.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/chunk-YH5BTUQO.jsView on unpkg · L317

dist/chunks/chunk-QI6SQ2UQ.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-QI6SQ2UQ.jsView on unpkg · L1

dist/runtime-worker.jsView file

•path = dist/runtime-worker.js kind = oversized_source_file sizeBytes = 2548202 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime-worker.jsView on unpkg

dist/kodax_cli.jsView file

•path = dist/kodax_cli.js kind = oversized_cli_entrypoint sizeBytes = 2672351 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/kodax_cli.jsView on unpkg

Findings

2 Critical5 High5 Medium4 Low

CriticalSame File Env Network Executiondist/chunks/chunk-WCSSXBHR.js

CriticalTrigger Reachable Dangerous Capabilitydist/chunks/chunk-WCSSXBHR.js

HighChild Processdist/semantic-worker.js

HighEvaldist/chunks/chunk-RS2GAABJ.js

HighCommand Output Exfiltrationdist/chunks/chunk-YH5BTUQO.js

HighCross File Remote Execution Contextdist/chunks/chunk-QI6SQ2UQ.js

HighOversized Source Filedist/runtime-worker.js

MediumDynamic Requiredist/constructed-handler-worker.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/kodax_cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

dist/semantic-worker.jsView file

Lines 163-193javascript

163}

164

165process.stdin.setEncoding('utf8');

166process.stdin.on('data', (chunk) => {

167 buffer += chunk;

168 while (true) {

169 const lineEnd = buffer.indexOf('\n');

170 if (lineEnd < 0) {

171 return;

172 }

173 const line = buffer.slice(0, lineEnd).replace(/\r$/, '').trim();

174 buffer = buffer.slice(lineEnd + 1);

175 if (line) {

176 handleFrame(line);

177 }

178 }

179});

180

181process.on('SIGTERM', () => process.exit(0));

182process.on('SIGINT', () => process.exit(0));

184`,"utf8"),await tm(r,t)}catch(o){throw await Ae.rm(r,{force:!0}).catch(()=>{}),o}await nm(n,ei.basename(t)).catch(()=>{})}async function nm(t,e){let n=`${e}.`,r

185`)}let c=0,l=!1,u=i;for(let d=i;d<t.length;d+=1){let p=t[d]??"";if(c+=de(p),p.includes("{")&&(l=!0),u=d,l&&c<=0&&d>i||!l&&d+1>=s)break}let f=l?u+1:s;return t.slice(i,f).join(`

High

Child Process

Package source references child process execution.

dist/semantic-worker.jsView on unpkg · L183

187`,n);return t.text.slice(n,r===-1?void 0:r).trim()||e.getText(t).split(/\r?\n/,1)[0]?.trim()||"<unknown>"}function Ui(t,e){return $.canHaveModifiers(t)?!!$.

189`)}function My(t){let{process:e}=t;return[`Process context for ${e.label}`,`Module: ${e.moduleId}`,`Entry: ${e.entryFile}${e.entrySymbol?` -> ${e.entrySymbol}`:""}`,`Freshness: ${t.freshness}`

190`)}function Wy(t){return[`Impact estimate for ${t.target.label}`,`Target: ${t.target.kind}${t.target.moduleId?` | module=${t.target.moduleId}`:""}${t.target.filePath?` | file=${t.target

193

Long lines were clipped for display.

dist/chunks/chunk-RS2GAABJ.jsView file

Lines 101-141javascript

101- If the user confirms, call \`set_permission_mode\` with \`mode: "accept-edits"\` to switch to implementation mode

102- If the user declines, stay in plan mode \u2014 do NOT call \`set_permission_mode\`

103

104## Asking User Questions

105

106When you need the user to make decisions, use \`ask_user_question\`.

107- For **multiple independent questions**, use the \`

dist/constructed-handler-worker.jsView file

Lines 1-3javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2var w=Object.defineProperty;var l=(o,t)=>w(o,"name",{value:t,configurable:!0});import{parentPort as f,workerData as b}from"node:worker_threads";function d(o){

dist/chunks/chunk-WCSSXBHR.jsView file

Lines 191-231javascript

191 - Allow (no) if the action is consistent with the user's stated intent and project rules, even if it mutates state inside the project.

192 - When uncertain, err toward block \u2014 false positives are recoverable (the agent can adapt), false negatives may not be.

193

194About <signals> (when present):

195 - Signals are mechanical pattern matches over the action

dist/chunks/chunk-YH5BTUQO.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/chunk-YH5BTUQO.jsView on unpkg · L317

dist/chunks/chunk-QI6SQ2UQ.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-QI6SQ2UQ.jsView on unpkg · L1

dist/runtime-worker.jsView file

•path = dist/runtime-worker.js kind = oversized_source_file sizeBytes = 2548202 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/runtime-worker.jsView on unpkg

dist/kodax_cli.jsView file

•path = dist/kodax_cli.js kind = oversized_cli_entrypoint sizeBytes = 2672351 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/kodax_cli.jsView on unpkg