registry / @lovinka/vitrinka / 1.10.0

@lovinka/vitrinka@1.10.0

vitrinka CLI + MCP server — capture and publish artifact sets, drive the annotation-board work queue from any MCP-aware AI.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 269 KB of source, external domains: registry.npmjs.org, vitrinka.lovinka.com

Source & flagged code

6 flagged

dist/cli.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2// cli.ts — the unified vitrinka CLI. Maintains `.screenshots/manifest.json` + a self-contained,

3// clickable `index.html` gallery, publishes sets to vitrinka (the internal artifacts app), and

4// one-shots capture (`snap`) + artifact scaffolding (`artifact-init`, `artifact-from-set`).

5//

6// Zero dependencies (node: builtins only). Erasable TypeScript only — Node 24 type-stripping

7// and bun both run it directly: `node cli.ts <cmd>`.

8//

9// add / build / meta / remote-init / push are ported verbatim in behavior from

10// skills/screenshot/gallery.mjs (offline marker, COPYFILE_DISABLE, control-file excludes,

11// `--key`, repeatable `--chip`). gallery.mjs is now a passthrough shim to this file.

12// Design: vitrinka/docs/plans/2026-07-03-hand-in-hand-tooling-design.md

13import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, readdirSync, copyFileSync, mkdtempSync, chmodSync, appendFileSync, statSync, openSync, readSync, closeSync, realpathSync, } from 'node:fs';

14import { join, resolve, basename, dirname, extname, relative, sep } from 'node:path';

15import { tmpdir, hostname } from 'node:os';

16import { spawnSync, spawn } from 'node:child_process';

17import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L15

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L15

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L15

18import { fileURLToPath, pathToFileURL } from 'node:url';

19import { createInterface } from 'node:readline';

20import { readToken, tokenSource, tokenPath, tokenHelp } from "./lib/token.js";

21import { operatorPath, readOperator, actorHeaderValue } from "./lib/operator.js";

22import { resolveBaseUrl } from "./lib/base-url.js";

23const CLI_PATH = fileURLToPath(import.meta.url);

24export function parseArgs(argv) {

25 const out = {};

26 for (let i = 0; i < argv.length; i++) {

27 const a = argv[i];

28 if (!a.startsWith('--'))

29 continue;

30 const key = a.slice(2);

31 const next = argv[i + 1];

32 const val = next === undefined || next.startsWith('--') ? true : argv[++i];

33 const cur = out[key];

34 if (cur === undefined)

35 out[key] = val; // repeated flags (e.g. --chip) accumulate

Lines 1029-1069javascript

1029 try {

1030 start = await fetch(`${base}/api/v1/cli/auth`, { method: 'POST', signal: AbortSignal.timeout(15_000) });

1031 }

1032 catch (e) {

1033 fail(`login: ${base} unreachable (${e instanceof Error

Lines 1822-1862javascript

1822// buildStatuslineWrapper — the ~/.claude/vitrinka-statusline.sh content. The

1823// original command is recorded on the VITRINKA_ORIG line (single-quoted), both

1824// to run it and so a re-run can recover it instead of wrapping the wrapper.

1825// Board detection mirrors the CLI's capture-root contract: .screenshots/.vitrinka

1826// with {base, key[, workspace]} → ${base}[/w/${workspace}]/boards/${key}. Needs jq

1827// (like the statusline examples in Claude's own docs); without jq it degrades to

1828// pass-through.

1829export function buildStatuslineWrapper(origCmd) {

1830 const quoted =

Lines 2206-2246javascript

2206 if (since && cmpSemver(m[1], since) <= 0)

2207 break;

2208 taking = true;

2209 }

2210 if (taking)

2211 out.push(line);

2212 }

2213

Source & flagged code

6 flagged · loading source

dist/cli.jsView file

15import { tmpdir, hostname } from 'node:os'; L16: import { spawnSync, spawn } from 'node:child_process'; L17: import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L15

1842if [ -n "$VITRINKA_ORIG" ]; then L1843: out=$(printf '%s' "$input" | /bin/sh -c "$VITRINKA_ORIG") L1844: fi

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L1842

1049const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open'; L1050: spawnSync(opener, [verifyUrl], { stdio: 'ignore' }); L1051: const intervalMs = Math.max(1, s.interval ?? 2) * 1000; L1052: const deadline = Date.now() + (s.expires_in ?? 600) * 1000; L1053: process.stdout.write(' waiting for approval …'); L1054: while (Date.now() < deadline) { ... L1057: try { L1058: res = await fetch(`${base}/api/v1/cli/auth/claim`, { L1059: method: 'POST',

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L1049

15import { tmpdir, hostname } from 'node:os'; L16: import { spawnSync, spawn } from 'node:child_process'; L17: import { createHash } from 'node:crypto'; ... L93: try { L94: m = JSON.parse(raw); L95: } ... L153: // appVersionOf reads the app's version string for capture provenance: L154: // app.json (Expo: expo.version, or bare version) first, then package.json. L155: // Best-effort — a missing/malformed file just leaves the field off. ... L359: const r = spawnSync('git', gitArgs, { cwd, encoding: 'utf8' }); L360: return r.status === 0 ? r.stdout.trim() : ''; L361: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L15

2226} L2227: // updateCmd updates the CLI source (git pull in a repo checkout, `npm i -g` for L2228: // a global npm install — detected from where the running file lives), then ... L2239: console.log(`repo checkout ${repoTop} (${before || '?'}) — git pull --ff-only…`); L2240: const pull = spawnSync('git', ['-C', repoTop, 'pull', '--ff-only'], { stdio: 'inherit' }); L2241: if (pull.status !== 0)

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L2226

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L15

Findings

5 High4 Medium5 Low

HighChild Processdist/cli.js

HighShelldist/cli.js

HighCommand Output Exfiltrationdist/cli.js

HighSandbox Evasion Gated Capabilitydist/cli.js

HighRuntime Package Installdist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/cli.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2// cli.ts — the unified vitrinka CLI. Maintains `.screenshots/manifest.json` + a self-contained,

3// clickable `index.html` gallery, publishes sets to vitrinka (the internal artifacts app), and

4// one-shots capture (`snap`) + artifact scaffolding (`artifact-init`, `artifact-from-set`).

5//

6// Zero dependencies (node: builtins only). Erasable TypeScript only — Node 24 type-stripping

7// and bun both run it directly: `node cli.ts <cmd>`.

8//

9// add / build / meta / remote-init / push are ported verbatim in behavior from

10// skills/screenshot/gallery.mjs (offline marker, COPYFILE_DISABLE, control-file excludes,

11// `--key`, repeatable `--chip`). gallery.mjs is now a passthrough shim to this file.

12// Design: vitrinka/docs/plans/2026-07-03-hand-in-hand-tooling-design.md

14import { join, resolve, basename, dirname, extname, relative, sep } from 'node:path';

15import { tmpdir, hostname } from 'node:os';

16import { spawnSync, spawn } from 'node:child_process';

17import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L15

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L15

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L15

18import { fileURLToPath, pathToFileURL } from 'node:url';

19import { createInterface } from 'node:readline';

20import { readToken, tokenSource, tokenPath, tokenHelp } from "./lib/token.js";

21import { operatorPath, readOperator, actorHeaderValue } from "./lib/operator.js";

22import { resolveBaseUrl } from "./lib/base-url.js";

23const CLI_PATH = fileURLToPath(import.meta.url);

24export function parseArgs(argv) {

25 const out = {};

26 for (let i = 0; i < argv.length; i++) {

27 const a = argv[i];

28 if (!a.startsWith('--'))

29 continue;

30 const key = a.slice(2);

31 const next = argv[i + 1];

32 const val = next === undefined || next.startsWith('--') ? true : argv[++i];

33 const cur = out[key];

34 if (cur === undefined)

35 out[key] = val; // repeated flags (e.g. --chip) accumulate

Lines 1029-1069javascript

1029 try {

1030 start = await fetch(`${base}/api/v1/cli/auth`, { method: 'POST', signal: AbortSignal.timeout(15_000) });

1031 }

1032 catch (e) {

1033 fail(`login: ${base} unreachable (${e instanceof Error

Lines 1822-1862javascript

1822// buildStatuslineWrapper — the ~/.claude/vitrinka-statusline.sh content. The

1823// original command is recorded on the VITRINKA_ORIG line (single-quoted), both

1824// to run it and so a re-run can recover it instead of wrapping the wrapper.

1825// Board detection mirrors the CLI's capture-root contract: .screenshots/.vitrinka

1826// with {base, key[, workspace]} → ${base}[/w/${workspace}]/boards/${key}. Needs jq

1827// (like the statusline examples in Claude's own docs); without jq it degrades to

1828// pass-through.

1829export function buildStatuslineWrapper(origCmd) {

1830 const quoted =

Lines 2206-2246javascript

2206 if (since && cmpSemver(m[1], since) <= 0)

2207 break;

2208 taking = true;

2209 }

2210 if (taking)

2211 out.push(line);

2212 }

2213