registry / @memnexus-ai/mx-agent-cli / 0.1.145

@memnexus-ai/mx-agent-cli@0.1.145

CLI for creating and managing AI agent teams

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 14 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 32 file(s), 364 KB of source, external domains: api.dev.memnexus.ai, claude.ai, deb.nodesource.com, registry.npmjs.org

Source & flagged code

5 flagged

dist/lib/claude.jsView file

Lines 1-26javascript

1/**

2 * CLAUDE.md deployment, CLAUDE.local.md generation, and session start.

3 * Mirrors the patterns in dev-tools/worktree-cli/src/operations.ts.

4 */

5import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'fs';

6import { basename, join } from 'path';

7import { execSync, spawnSync } from 'child_process';

8import { homedir } from 'os';

High

Child Process

Package source references child process execution.

dist/lib/claude.jsView on unpkg · L6

9import chalk from 'chalk';

10import { BOOTSTRAP_SETTINGS_JSON } from './templates.js';

11// ── Logging helpers ───────────────────────────────────────────────────

12export function logSuccess(msg) {

13 console.log(chalk.green(' ✓ ' + msg));

14}

15export function logWarning(msg) {

16 console.log(chalk.yellow(' ⚠ ' + msg));

17}

18export function logDim(msg) {

19 console.log(chalk.dim(' ' + msg));

20}

21// Base hooks that are deployed to every worktree regardless of project

22const BASE_HOOK_NAMES = ['auto-checkpoint.sh', 'reload-checkpoint.sh'];

23// CI validation hooks — intercept git push and run package validators.

24// Deployed by syncClaudeConfig; also reconciled by deployBaseHooks via the

25// global cache so that worktrees that missed a syncClaudeConfig run still

26// receive these hooks on the next session start.

dist/lib/gh-remote.jsView file

Lines 1-39javascript

1/**

2 * GitHub remote auto-setup helper for `mx-agent new`.

3 *

4 * Opt-in via --with-remote. Fails open: any failure (gh missing, not

5 * authenticated, repo already exists, network error) downgrades to a

6 * warning and returns { created: false, reason } so the caller can

7 * still print the manual remote-setup hint.

8 *

9 * Security: all arguments are passed as argv to spawnSync (never through

10 * a shell). projectName is validated upstream by validateProjectName().

11 * gh auth output is never captured into memories or telemetry.

dist/index.jsView file

Lines 22-62javascript

22import { fileURLToPath } from 'url';

23import { Command } from 'commander';

24import { runBootstrap } from './commands/bootstrap.js';

25import { runCreate } from './commands/create.js';

26import { runStart } from './commands/start.js';

dist/commands/pr-sync.jsView file

Lines 33-73javascript

33 const result = spawnSync('gh', ['pr', 'view', String(prNumber),

34 '--repo', repo,

35 '--json', 'number,commits,state,mergedAt',

36 ], { encoding: 'utf-8', stdio: 'pipe' });

dist/commands/start.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @memnexus-ai/mx-agent-cli@0.1.144 matchedIdentity = npm:[redacted]:0.1.144 similarity = 0.969 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/start.jsView on unpkg

Source & flagged code

5 flagged · loading source

dist/lib/claude.jsView file

6import { basename, join } from 'path'; L7: import { execSync, spawnSync } from 'child_process'; L8: import { homedir } from 'os';

High

Child Process

Package source references child process execution.

dist/lib/claude.jsView on unpkg · L6

dist/lib/gh-remote.jsView file

19// 1. gh present? L20: const which = spawn('command', ['-v', 'gh'], { encoding: 'utf-8', stdio: 'pipe', shell: true }); L21: if (which.status !== 0) {

High

Shell

Package source references shell execution.

dist/lib/gh-remote.jsView on unpkg · L19

dist/index.jsView file

42const __dirname = dirname(fileURLToPath(import.meta.url)); L43: const require = createRequire(import.meta.url); L44: const pkg = require(join(__dirname, '../package.json'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L42

dist/commands/pr-sync.jsView file

53const apiUrl = options.apiUrl || getConfigValue('observability-api-url') || DEFAULT_API_URL; L54: const apiToken = options.apiToken || getConfigValue('observability-api-token') || process.env.OBSERVABILITY_API_TOKEN; L55: if (!apiToken) { ... L59: } L60: if (apiUrl && !apiUrl.startsWith('http://') && !apiUrl.startsWith('https://')) { L61: if (!quiet) ... L65: // Detect repo from gh CLI L66: const repoResult = spawnSync('gh', ['repo', 'view', '--json', 'nameWithOwner', '--jq', '.nameWithOwner'], { L67: encoding: 'utf-8', stdio: 'pipe',

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/pr-sync.jsView on unpkg · L53

dist/commands/start.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/start.jsView on unpkg

Findings

4 High4 Medium6 Low

HighChild Processdist/lib/claude.js

HighShelldist/lib/gh-remote.js

HighSame File Env Network Executiondist/commands/pr-sync.js

HighPrevious Version Dangerous Deltadist/commands/start.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

5 flagged

dist/lib/claude.jsView file

Lines 1-26javascript

1/**

2 * CLAUDE.md deployment, CLAUDE.local.md generation, and session start.

3 * Mirrors the patterns in dev-tools/worktree-cli/src/operations.ts.

4 */

5import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'fs';

6import { basename, join } from 'path';

7import { execSync, spawnSync } from 'child_process';

8import { homedir } from 'os';

High

Child Process

Package source references child process execution.

dist/lib/claude.jsView on unpkg · L6

9import chalk from 'chalk';

10import { BOOTSTRAP_SETTINGS_JSON } from './templates.js';

11// ── Logging helpers ───────────────────────────────────────────────────

12export function logSuccess(msg) {

13 console.log(chalk.green(' ✓ ' + msg));

14}

15export function logWarning(msg) {

16 console.log(chalk.yellow(' ⚠ ' + msg));

17}

18export function logDim(msg) {

19 console.log(chalk.dim(' ' + msg));

20}

21// Base hooks that are deployed to every worktree regardless of project

22const BASE_HOOK_NAMES = ['auto-checkpoint.sh', 'reload-checkpoint.sh'];

23// CI validation hooks — intercept git push and run package validators.

24// Deployed by syncClaudeConfig; also reconciled by deployBaseHooks via the

25// global cache so that worktrees that missed a syncClaudeConfig run still

26// receive these hooks on the next session start.

dist/lib/gh-remote.jsView file

Lines 1-39javascript

1/**

2 * GitHub remote auto-setup helper for `mx-agent new`.

3 *

4 * Opt-in via --with-remote. Fails open: any failure (gh missing, not

5 * authenticated, repo already exists, network error) downgrades to a

6 * warning and returns { created: false, reason } so the caller can

7 * still print the manual remote-setup hint.

8 *

9 * Security: all arguments are passed as argv to spawnSync (never through

10 * a shell). projectName is validated upstream by validateProjectName().

11 * gh auth output is never captured into memories or telemetry.

dist/index.jsView file

Lines 22-62javascript

22import { fileURLToPath } from 'url';

23import { Command } from 'commander';

24import { runBootstrap } from './commands/bootstrap.js';

25import { runCreate } from './commands/create.js';

26import { runStart } from './commands/start.js';

dist/commands/pr-sync.jsView file

Lines 33-73javascript

33 const result = spawnSync('gh', ['pr', 'view', String(prNumber),

34 '--repo', repo,

35 '--json', 'number,commits,state,mergedAt',

36 ], { encoding: 'utf-8', stdio: 'pipe' });

dist/commands/start.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/start.jsView on unpkg