registry / @lovinka/vitrinka / 1.10.0

@lovinka/vitrinka@1.10.0

vitrinka CLI + MCP server — capture and publish artifact sets, drive the annotation-board work queue from any MCP-aware AI.

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 14 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 269 KB of source, external domains: registry.npmjs.org, vitrinka.lovinka.com

Source & flagged code

6 flagged

dist/cli.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2// cli.ts — the unified vitrinka CLI. Maintains `.screenshots/manifest.json` + a self-contained,

3// clickable `index.html` gallery, publishes sets to vitrinka (the internal artifacts app), and

4// one-shots capture (`snap`) + artifact scaffolding (`artifact-init`, `artifact-from-set`).

5//

6// Zero dependencies (node: builtins only). Erasable TypeScript only — Node 24 type-stripping

7// and bun both run it directly: `node cli.ts <cmd>`.

8//

9// add / build / meta / remote-init / push are ported verbatim in behavior from

Source & flagged code

6 flagged · loading source

dist/cli.jsView file

15import { tmpdir, hostname } from 'node:os'; L16: import { spawnSync, spawn } from 'node:child_process'; L17: import { createHash } from 'node:crypto';

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L15

1842if [ -n "$VITRINKA_ORIG" ]; then L1843: out=$(printf '%s' "$input" | /bin/sh -c "$VITRINKA_ORIG") L1844: fi

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L1842

1049const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open'; L1050: spawnSync(opener, [verifyUrl], { stdio: 'ignore' }); L1051: const intervalMs = Math.max(1, s.interval ?? 2) * 1000; L1052: const deadline = Date.now() + (s.expires_in ?? 600) * 1000; L1053: process.stdout.write(' waiting for approval …'); L1054: while (Date.now() < deadline) { ... L1057: try { L1058: res = await fetch(`${base}/api/v1/cli/auth/claim`, { L1059: method: 'POST',

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L1049

15import { tmpdir, hostname } from 'node:os'; L16: import { spawnSync, spawn } from 'node:child_process'; L17: import { createHash } from 'node:crypto'; ... L93: try { L94: m = JSON.parse(raw); L95: } ... L153: // appVersionOf reads the app's version string for capture provenance: L154: // app.json (Expo: expo.version, or bare version) first, then package.json. L155: // Best-effort — a missing/malformed file just leaves the field off. ... L359: const r = spawnSync('git', gitArgs, { cwd, encoding: 'utf8' }); L360: return r.status === 0 ? r.stdout.trim() : ''; L361: }

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L15

2226} L2227: // updateCmd updates the CLI source (git pull in a repo checkout, `npm i -g` for L2228: // a global npm install — detected from where the running file lives), then ... L2239: console.log(`repo checkout ${repoTop} (${before || '?'}) — git pull --ff-only…`); L2240: const pull = spawnSync('git', ['-C', repoTop, 'pull', '--ff-only'], { stdio: 'inherit' }); L2241: if (pull.status !== 0)

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L2226

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli.jsView on unpkg · L15

Findings

5 High4 Medium5 Low

HighChild Processdist/cli.js

HighShelldist/cli.js

HighCommand Output Exfiltrationdist/cli.js

HighSandbox Evasion Gated Capabilitydist/cli.js

HighRuntime Package Installdist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/cli.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Lines 1029-1069javascript

1029 try {

1030 start = await fetch(`${base}/api/v1/cli/auth`, { method: 'POST', signal: AbortSignal.timeout(15_000) });

1031 }

1032 catch (e) {

1033 fail(`login: ${base} unreachable (${e instanceof Error ? e.message : String(e)})`);

1034 return;

1035 }

1036 if (start.status === 404) {

1037 fail(`login: ${base} has no CLI sign-in (single-tenant install?) — use the shared token instead:\n\n${tokenHelp()}`);

1038 return;

1039 }

1040 if (!start.ok)

1041 fail(`login: ${base} refused (${start.status})`);

1042 const s = (await start.json());

1043 const verifyUrl = `${base}${s.verify_path}`;

1044 console.log('');

1045 console.log(` Confirm this code in your browser: ${s.user_code}`);

1046 console.log(` ${verifyUrl}`);

1047 console.log('');

1048 // Best-effort browser launch; the printed URL is the real contract.

1049 const opener = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';

1050 spawnSync(opener, [verifyUrl], { stdio: 'ignore' });

1051 const intervalMs = Math.max(1, s.interval ?? 2) * 1000;

1052 const deadline = Date.now() + (s.expires_in ?? 600) * 1000;

1053 process.stdout.write(' waiting for approval …');

1054 while (Date.now() < deadline) {

1055 await new Promise((f) => setTimeout(f, intervalMs));

1056 let res;

1057 try {

1058 res = await fetch(`${base}/api/v1/cli/auth/claim`, {

1059 method: 'POST',

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/cli.jsView on unpkg · L1049

1060 headers: { 'Content-Type': 'application/json' },

1061 body: JSON.stringify({ device_code: s.device_code }),

1062 signal: AbortSignal.timeout(15_000),

1063 });

1064 }

1065 catch {

1066 process.stdout.write('.'); // transient network blip — keep polling

1067 continue;

1068 }

1069 if (res.status === 202) {

Lines 1822-1862javascript

1822// buildStatuslineWrapper — the ~/.claude/vitrinka-statusline.sh content. The

1823// original command is recorded on the VITRINKA_ORIG line (single-quoted), both

1824// to run it and so a re-run can recover it instead of wrapping the wrapper.

1825// Board detection mirrors the CLI's capture-root contract: .screenshots/.vitrinka

1826// with {base, key[, workspace]} → ${base}[/w/${workspace}]/boards/${key}. Needs jq

1827// (like the statusline examples in Claude's own docs); without jq it degrades to

1828// pass-through.

1829export function buildStatuslineWrapper(origCmd) {

1830 const quoted = origCmd.replaceAll("'", `'\\''`);

1831 return `#!/bin/bash

1832# vitrinka-statusline — managed by \`vitrinka install-claude\` (re-runs rewrite it).

1833# Wraps the original Claude Code statusline and appends a 🧷 board-URL segment when

1834# the session's capture root has a .screenshots/.vitrinka descriptor. Plain URL,

1835# not OSC 8 — Claude Code strips OSC 8 from statusline output; terminals

1836# cmd+click-linkify visible URLs themselves.

1837VITRINKA_ORIG='${quoted}'

1838

1839input=$(cat)

1840

1841out=""

1842if [ -n "$VITRINKA_ORIG" ]; then

1843 out=$(printf '%s' "$input" | /bin/sh -c "$VITRINKA_ORIG")

1844fi

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L1842

1845

1846# The original already renders a board segment → pass through untouched.

1847case "$out" in *'/boards/'*|*'🧷'*) printf '%s\\n' "$out"; exit 0 ;; esac

1848

1849if ! command -v jq >/dev/null 2>&1; then printf '%s\\n' "$out"; exit 0; fi

1850

1851DIR=$(printf '%s' "$input" | jq -r '.workspace.current_dir // empty')

1852PROJECT_DIR=$(printf '%s' "$input" | jq -r '.workspace.project_dir // empty')

1853

1854BOARD=""

1855for VJSON in "$DIR/.screenshots/.vitrinka" "$PROJECT_DIR/.screenshots/.vitrinka"; do

1856 [ -f "$VJSON" ] || continue

1857 VBASE=$(jq -r '.base // empty' "$VJSON" 2>/dev/null)

1858 VKEY=$(jq -r '.key // empty' "$VJSON" 2>/dev/null)

1859 VWS=$(jq -r '.workspace // empty' "$VJSON" 2>/dev/null)

1860 if [ -n "$VBASE" ] && [ -n "$VKEY" ]; then

1861 [ -n "$VWS" ] && VBASE="$VBASE/w/$VWS"

1862 BOARD=$(printf '\\033[35m🧷\\033[0m \\033[2m%s\\033[0m' "$VBASE/boards/$VKEY")

Lines 2206-2246javascript

2206 if (since && cmpSemver(m[1], since) <= 0)

2207 break;

2208 taking = true;

2209 }

2210 if (taking)

2211 out.push(line);

2212 }

2213 return out.join('\n').trim();

2214}

2215// ---------- update: bring the CLI + installed surfaces to the latest ----------

2216// pkgVersion reads the version of the package the running CLI belongs to.

2217// dirname(CLI_PATH) is pkg/src (repo checkout) or <pkg>/dist (npm install) —

2218// package.json sits one level up in both layouts.

2219function pkgVersion() {

2220 try {

2221 return String(JSON.parse(readFileSync(join(dirname(CLI_PATH), '..', 'package.json'), 'utf8')).version || '');

2222 }

2223 catch {

2224 return ''; // no package.json next to the CLI (odd layout) — version is cosmetic here

2225 }

2226}

2227// updateCmd updates the CLI source (git pull in a repo checkout, `npm i -g` for

2228// a global npm install — detected from where the running file lives), then

2229// refreshes every surface a previous install put on this machine: the skills

2230// bundle (+ /vitrinka:listen command stub) and, ONLY where it was consented to

2231// before, the Claude Code UI wiring. It never asks new consent questions —

2232// that stays `vitrinka install`'s job. The refresh steps re-exec the (possibly

2233// just replaced) CLI file so they run the NEW code, not this stale process.

2234async function updateCmd(_args) {

2235 const repoTop = git(['rev-parse', '--show-toplevel'], dirname(CLI_PATH));

2236 if (repoTop) {

2237 // Repo checkout — the shim/MCP run the source directly, so a pull IS the update.

2238 const before = git(['rev-parse', '--short', 'HEAD'], repoTop);

2239 console.log(`repo checkout ${repoTop} (${before || '?'}) — git pull --ff-only…`);

2240 const pull = spawnSync('git', ['-C', repoTop, 'pull', '--ff-only'], { stdio: 'inherit' });

2241 if (pull.status !== 0)

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/cli.jsView on unpkg · L2226

2242 fail('update: git pull --ff-only failed — fix the repo state (dirty tree / diverged branch) and re-run');

2243 const after = git(['rev-parse', '--short', 'HEAD'], repoTop);

2244 if (after === before)

2245 console.log(`✓ already up to date (${after})`);

2246 else {