registry / @kodax-ai/kodax / 0.7.61

@kodax-ai/kodax@0.7.61

⚠ Under review

KodaX lightweight coding agent - TypeScript implementation with 15 built-in LLM provider aliases, published as a Node-free single-file CLI and SDK

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 55 file(s), 2.87 MB of source, external domains: 127.0.0.1, api.example.com, evil.com, github.com

Oversized source lightweight scan

dist/kodax_cli.js2.21 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsDynamicRequireHighEntropyStringsMinified

Source & flagged code

8 flagged

dist/semantic-worker.jsView file

Lines 1-12javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2var Yn=Object.defineProperty;var a=(O,e)=>Yn(O,"name",{value:e,configurable:!0});var Z=(O,e)=>()=>(O&&(e=O(O=0)),e);var Vn=(O,e)=>{for(var t in e)Yn(O,t,{get:e[t],enumerable:!0})};import Jr from"path";function Zn(O){return Jr.resolve(O?.executionCwd??O?.gitRoot??process.cwd())}var Un=Z(()=>{"use strict";a(Zn,"resolveExecutionCwd")});import{AsyncLocalStorage as Hr}from"node:async_hooks";import be from"fs/promises";import wt from"path";async function D(O,e){try{let t=await be.readFile(O,"utf8"),n=JSON.parse(t);return e&&!e(n)?null:n}catch{return null}}function te(O,e){if(process.env.KODAX_DEBUG_ ...

3`,"utf8"),await is(n,O)}catch(i){throw await be.rm(n,{force:!0}).catch(()=>{}),i}await rs(t,wt.basename(O)).catch(()=>{})}async function rs(O,e){let t=`${e}.`,n=Date.now(),i=await be.readdir(O);await Promise.all(i.filter(r=>r.startsWith(t)&&Os.test(r.slice(t.length))).map(async r=>{let s=wt.join(O,r);try{let o=await be.stat(s);n-o.mtimeMs>=es&&await be.rm(s,{force:!0})}catch{}}))}var Kr,es,Os,Tt,ns,YO=Z(()=>{"use strict";Kr=new Hr;a(D,"safeReadJson");a(te,"debugLogRepoIntelligence");a(fO,"resolveRepoIntelligenceStorageDir");es=3600*1e3,Os=/^\d+\.\d+(?:\.\d+)?\.tmp$/,Tt=0;a(ts,"nextAtomicTempPa ...

4`)}let o=0,l=!1,Q=r;for(let c=r;c<O.length;c+=1){let d=O[c]??"";if(o+=oe(d),d.includes("{")&&(l=!0),Q=c,l&&

5`)}function pl(O){let e=new Set,t=[/\b([A-Za-z_][A-Za-z0-9_]*)\s*\(/g,/\.([A-Za-z_][A-Za-z0-9_]*)\s*\(/g];for(let n of t){let i=null;for(;(i=

6`,t);return O.text.slice(t,n===-1?void 0:n).trim()||e.getText(O).split(/\r?\n/,1)[0]?.trim()||"<unknown>"}function un(O,e){return w.canHaveModifiers(O)?!!w.getModifiers(O)?.some(t=>t.kind===e):!1}function Ee(O){return un(O,w.SyntaxKind.ExportKeyword)||un(O,w.SyntaxKind.DefaultKeyword)?!0:w.isVariableDeclaration(O)&&w.isVariableDeclarationList(O.parent)&&w.isVariableStatement(O.parent.parent)?Ee(O.parent.parent):!1}function pt(O){return O&&(w.isIdentifier(O)||w.isPrivateIdentifier(O)||w.isStringLiteral(O)||w.isNumericLiteral(O))?O.text:null}function Sr(O){return w.isIdentifier(O)?O.text:w.isPro ...

7`)}function jl(O){let{symbol:e}=O;return[`Symbol context for ${e.name}`,`Definition: ${e.filePath}:${e.line}`,`Module: ${e.moduleId} | Kind: ${e.kind} | Exported: ${e.exported?"yes":"no"}`,`Language: ${

8`)}function Gl(O){let{process:e}=O;return[`Process context for ${e.label}`,`Module: ${e.moduleId}`,`Entry: ${e.entryFile}${e.entrySymbol?` -> ${e.entrySymbol}`:""}`,`Freshness: ${O.freshness}`,`Confidence: ${yt(O.confidence)} (${O.confidence.toFixed(2)})`,`Summary: ${e.summary}`,"Steps:",...e.steps.map(t=>`- ${t.kind} ${t.symbolName} @ ${t.filePath}${t.line?`:${t.line}`:""} | ${t.note}`),O.alternatives.length>0?`Alternatives: ${O.alternatives.map(t=>t.label).join(" | ")}

9`)}function El(O){return[`Impact estimate for ${O.target.label}`,`Target: ${O.target.kind}${O.target.moduleId?` | module=${O.target.moduleId}`:""}${O.target.filePath?` | file=${O.target.filePath}`:""}`,`Freshness: ${O.freshness}`,`Confidence: ${yt(O.confidence)} (${O.confidence.toFixed(2)})`,`Summary: ${O.summary}`,`Impacted modules: ${O.impactedModules.map(e=>`${e.label}(${e.moduleId})`).

10`)}var Ir=Z(()=>{"use strict";a(yt,"confidenceLabel");a(xt,"capabilityLines");a(Ul,"renderModuleContext");a(jl,"renderSymbolContext");a(Gl,"renderProcessContext");a(El,"renderImpactEstimate")});function Fl(O){let e=0,t=new Map,n=new Map,i=new Set,r=[],s=[],o=a(l=>{t.set(l,e),n.set(l,e),e++,r.push(l),i.add(l);for(let Q of O.get(l)??[])t.has(Q)?i.has(Q)&&n.set(l,Math.min(n.get(l)??0,t.get(Q)??0)):(o(Q),n.set(l,Math.min(n.get(l)??0,n.get(Q)??0)));if((n.get(l)??0)===(t.get(l)??0)){let Q=[],h="";do h=r.pop()??"",i.delete(h),Q.push(h);while(h!==l&&r.length>=0&&h!=="");s.push(Q)}},"strongconnect");fo ...

11`)}var Nr=Z(()=>{"use strict";a(Fl,"tarjanScc");a(Al,"severityFor");a(Cl,"findCyclicDependencies");a(Il,"renderCycleAnalysis")});var Dr={};Vn(Dr,{buildCompleteInputsFromSourceStates:()=>Xn,buildFreshnessLabel:()=>QO,buildIncrementalAnalysisEntries:()=>xn,buildRepoIntelligenceIndex:()=>bl,buildRepoIntelligenceIndexFromInputs:()=>$n,canDirectReuseCleanCachedQueryIndex:()=>kr,canDirectReuseDirtyCachedQueryIndex:()=>_r,classifyChangedOrNewSourceFiles:()=>yn,collectCallers:()=>

Long lines were clipped for display.

dist/chunks/chunk-QCBKLNN5.jsView file

Lines 1-19javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2import{Ab as Te,Bb as X,Cb as Ee,Db as Ae,Fa as We,Jc as Pe,Kc as Oe}from"./chunk-7COB3EKF.js";import{N as ge}from"./chunk-S4GVQO3W.js";import{Va as G,Zd as ve,_d as Se,ae as F,db

dist/chunks/chunk-XHOPSZVL.jsView file

Lines 191-231javascript

191 - Allow (no) if the action is consistent with the user's stated intent and project rules, even if it mutates state inside the project.

192 - When uncertain, err toward block \u2014 false positives are recoverable (the agent can adapt), false negatives may not be.

193

194About <signals> (when present):

195 - Signals are mechanical pattern matches over the action

dist/chunks/chunk-NJW2LQOP.jsView file

Lines 1-40javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2import{q as bs,r as As,s as vs,t as Cs,u as Ps}from"./chunk-ZL5CEANW.js";import{a as s}from"./chunk-V4WSBIXB.js";var dd=32768,ld=60,ud=300,fd=3,pd

dist/chunks/chunk-PJXKBM3Y.jsView file

1Cross-file remote execution chain: dist/chunks/chunk-PJXKBM3Y.js spawns dist/chunks/chunk-7COB3EKF.js; helper contains network access plus dynamic code execution. L1: // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024. L2: import{$ as uc,A as _S,B as ms,Ba as sm,C as Au,Ca as Bu,D as LS,Da as ZS,E as ac,Ea as ew,F as Qp,G as $S,H as Zp,I as ni,J as em,K as cc,L as tm,M as nm,N as OS,O as DS,P as hs,Q... L3: `).length,i={width:n,height:r};return pw.set(e,i),i},"measureText"),gm=LE;import PE from"wrap-ansi";import $E from"cli-truncate";var mw={},OE=o((e,t,n)=>{let r=e+String(t)+String(n... ... L12: `).repeat(N);g&&(O=Qu.dim(O));let G=(nr(a.right,f,"foreground")+` L13: `).repeat(N);S&&(G=Qu.dim(G));let Y=I?nr((T?a.bottomLeft:"")+a.bottom.repeat(A)+(v?a.bottomRight:""),l,"foreground"):void 0;I&&m&&(Y=Qu.dim(Y));let re=w?1:0;D&&r.write(e,t,D,{trans... L14: `.repeat(i)+dM(t,r)}return t},"applyPaddingToText"),ed=o((e,t={})=>{if(t.sk[redacted]&&e.internal_static||e.yogaNode?.getDisplay()===wo.DISPLAY_NONE)return"";let n="";if(e.no... ... L20: `:"",frame:void 0}}let r=new Ms({width:e.yogaNode.getComputedWidth(),height:e.yogaNode.getComputedHeight()});Lw(),bm(e,r,{…

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-PJXKBM3Y.jsView on unpkg · L1

dist/kodax_cli.jsView file

•path = dist/kodax_cli.js kind = oversized_source_file sizeBytes = 2315776 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/kodax_cli.jsView on unpkg

•path = dist/kodax_cli.js kind = oversized_cli_entrypoint sizeBytes = 2315776 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/kodax_cli.jsView on unpkg

Source & flagged code

8 flagged · loading source

dist/semantic-worker.jsView file

2var Yn=Object.defineProperty;var a=(O,e)=>Yn(O,"name",{value:e,configurable:!0});var Z=(O,e)=>()=>(O&&(e=O(O=0)),e);var Vn=(O,e)=>{for(var t in e)Yn(O,t,{get:e[t],enumerable:!0})};... L3: `,"utf8"),await is(n,O)}catch(i){throw await be.rm(n,{force:!0}).catch(()=>{}),i}await rs(t,wt.basename(O)).catch(()=>{})}async function rs(O,e){let t=`${e}.`,n=Date.now(),i=await ... L4: `)}let o=0,l=!1,Q=r;for(let c=r;c<O.length;c+=1){let d=O[c]??"";if(o+=oe(d),d.includes("{")&&(l=!0),Q=c,l&&o<=0&&c>r||!l&&c+1>=s)break}let h=l?Q+1:s;return O.slice(r,h).join(`

High

Child Process

Package source references child process execution.

dist/semantic-worker.jsView on unpkg · L2

dist/chunks/chunk-QCBKLNN5.jsView file

11`)}a(jt,"buildInvestigatorPrompt");function Bt(e){let t=Math.max(1,(e.maxAgents??8)-1);return(e.targets&&e.targets.length>0?e.targets:$t).slice(0,t).map((o,i)=>({name:`investigate-... L12: ${s.text}`),rubric:t.rubric??Nt}))).text,findings:o,degraded:i}}a(Ut,"runParallelInvestigation");var je={meta:{name:"parallel-investigation",description:"Fan out read-only investig... L13: `,"utf8"),{name:t,path:r,source:"project",execution:"capability-generated"}}a(en,"saveGeneratedWorkflow");async function Ke(e,t){await ae(e,`${JSON.stringify(t,null,2)}

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/chunks/chunk-QCBKLNN5.jsView on unpkg · L11

dist/chunks/chunk-XHOPSZVL.jsView file

211`;)d+=1;continue}if(l==="/"&&f==="*"){for(d+=2;d<e.length&&!(e[d]==="*"&&e[d+1]==="/");)d+=1;d+=2;continue}break}if(e[d]==="]"||e[d]==="}"){r+=1;continue}}t+=c,r+=1}return t}o(im,"... L212: \u2026[truncated]\u2026`;function dm(e,t={}){let r=t.maxToolResultBytes??2048,n=t.maxTranscriptBytes??8192,i=[];for(let s of e){let c=um(s,r);c!==null&&i.push(c)}return fm(i,n)}o(d... L213: # Claude Code Code Bash command prefix detection

Critical

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution with blocking evidence.

dist/chunks/chunk-XHOPSZVL.jsView on unpkg · L211

•Trigger-reachable chain: manifest.main -> dist/index.js -> dist/chunks/chunk-XHOPSZVL.js Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

dist/chunks/chunk-XHOPSZVL.jsView on unpkg

dist/chunks/chunk-NJW2LQOP.jsView file

20L21: `+Iu({lineCount:r,byteCount:o,wasLineTruncated:i,wasByteTruncated:a}),lineCount:r,byteCount:o,wasLineTruncated:i,wasByteTruncated:a}}s(Eu,"truncateEntrypointContent");function Iu(e... L22: `,"utf8"),o}s(Gu,"createSnapshot");async function Xu(e,t,n,r){let o=no(t);await en(o,{recursive:!0});let i=await to(o);if(!Pi(e,i))throw new Error("skill proposal parent directory ... ... L25: `),{updated:!0,record:o}}s(Ji,"updateSkillTrustLedger");import{readdir as Hf,readFile as Kf,stat as Gf}from"fs/promises";import{join as Xf}from"path";var Vf=1024*1024,Yf=new Set(["... L26: `).toLowerCase()}s(ap,"buildCatalogSearchText");function fo(e,t,n={}){let r=t.trim().toLowerCase(),o=Math.max(1,Math.floor(n.limit??10));return e.filter(i=>!n.kind||i.kind===n.kind... L27: \r ... L29: \r L30: `);if(m<0)return;let h=n.subarray(0,m).toString("utf8").match(/Content-Length:\s*(\d+)/i);if(!h?.[1]){n=Buffer.alloc(0),r.onError(new Error("Malformed Content-Length header from MC... L31: `,"utf8"):t.stdin.write(dp(u),"utf8")},switchFraming(u){o=u,n=Buffer.alloc(0)},async close(){if(n=Buffer.alloc(0),t){let u=t;t=void 0,r=void 0,d.add(u),u.stdout.removeAllListeners(... ... L35: `:"")+l.map(f=>`data:${f} L

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/chunks/chunk-NJW2LQOP.jsView on unpkg · L20

dist/chunks/chunk-PJXKBM3Y.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-PJXKBM3Y.jsView on unpkg · L1

dist/kodax_cli.jsView file

•path = dist/kodax_cli.js kind = oversized_source_file sizeBytes = 2315776 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/kodax_cli.jsView on unpkg

•path = dist/kodax_cli.js kind = oversized_cli_entrypoint sizeBytes = 2315776 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/kodax_cli.jsView on unpkg

Findings

2 Critical4 High5 Medium5 Low

CriticalSame File Env Network Executiondist/chunks/chunk-XHOPSZVL.js

CriticalTrigger Reachable Dangerous Capabilitydist/chunks/chunk-XHOPSZVL.js

HighChild Processdist/semantic-worker.js

HighCommand Output Exfiltrationdist/chunks/chunk-NJW2LQOP.js

HighCross File Remote Execution Contextdist/chunks/chunk-PJXKBM3Y.js

HighOversized Source Filedist/kodax_cli.js

MediumDynamic Requiredist/chunks/chunk-QCBKLNN5.js

MediumNetwork

MediumEnvironment Vars

MediumOversized Cli Entrypointdist/kodax_cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowEval

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

dist/semantic-worker.jsView file

Lines 1-12javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

4`)}let o=0,l=!1,Q=r;for(let c=r;c<O.length;c+=1){let d=O[c]??"";if(o+=oe(d),d.includes("{")&&(l=!0),Q=c,l&&

5`)}function pl(O){let e=new Set,t=[/\b([A-Za-z_][A-Za-z0-9_]*)\s*\(/g,/\.([A-Za-z_][A-Za-z0-9_]*)\s*\(/g];for(let n of t){let i=null;for(;(i=

Long lines were clipped for display.

dist/chunks/chunk-QCBKLNN5.jsView file

Lines 1-19javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2import{Ab as Te,Bb as X,Cb as Ee,Db as Ae,Fa as We,Jc as Pe,Kc as Oe}from"./chunk-7COB3EKF.js";import{N as ge}from"./chunk-S4GVQO3W.js";import{Va as G,Zd as ve,_d as Se,ae as F,db

dist/chunks/chunk-XHOPSZVL.jsView file

Lines 191-231javascript

191 - Allow (no) if the action is consistent with the user's stated intent and project rules, even if it mutates state inside the project.

192 - When uncertain, err toward block \u2014 false positives are recoverable (the agent can adapt), false negatives may not be.

193

194About <signals> (when present):

195 - Signals are mechanical pattern matches over the action

dist/chunks/chunk-NJW2LQOP.jsView file

Lines 1-40javascript

1// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.

2import{q as bs,r as As,s as vs,t as Cs,u as Ps}from"./chunk-ZL5CEANW.js";import{a as s}from"./chunk-V4WSBIXB.js";var dd=32768,ld=60,ud=300,fd=3,pd

dist/chunks/chunk-PJXKBM3Y.jsView file

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/chunks/chunk-PJXKBM3Y.jsView on unpkg · L1

dist/kodax_cli.jsView file

•path = dist/kodax_cli.js kind = oversized_source_file sizeBytes = 2315776 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/kodax_cli.jsView on unpkg

•path = dist/kodax_cli.js kind = oversized_cli_entrypoint sizeBytes = 2315776 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/kodax_cli.jsView on unpkg