registry / @memnexus-ai/mx-agent-cli / 0.1.169

@memnexus-ai/mx-agent-cli@0.1.169

CLI for creating and managing AI agent teams

Static Scan Results

scanned 11h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsObfuscatedUrlStrings

Manifest

NoLicense

scanned 42 file(s), 471 KB of source, external domains: api.dev.memnexus.ai, claude.ai, deb.nodesource.com, registry.npmjs.org

Source & flagged code

6 flagged

dist/lib/claude.jsView file

Lines 1-26javascript

1/**

2 * CLAUDE.md deployment, CLAUDE.local.md generation, and session start.

3 * Mirrors the patterns in dev-tools/worktree-cli/src/operations.ts.

4 */

5import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'fs';

6import { basename, join } from 'path';

7import { execSync, spawn, spawnSync } from 'child_process';

8import { homedir } from 'os';

High

Child Process

Package source references child process execution.

dist/lib/claude.jsView on unpkg · L6

9import chalk from 'chalk';

10import { BOOTSTRAP_SETTINGS_JSON } from './templates.js';

11import { removeLock, updateChildPid } from './leader-lock.js';

12// ── Logging helpers ───────────────────────────────────────────────────

13export function logSuccess(msg) {

14 console.log(chalk.green(' ✓ ' + msg));

15}

16export function logWarning(msg) {

17 console.log(chalk.yellow(' ⚠ ' + msg));

18}

19export function logDim(msg) {

20 console.log(chalk.dim(' ' + msg));

21}

22// Base hooks that are deployed to every worktree regardless of project

23const BASE_HOOK_NAMES = ['auto-checkpoint.sh', 'reload-checkpoint.sh'];

24// CI validation hooks — intercept git push and run package validators.

25// Deployed by syncClaudeConfig; also reconciled by deployBaseHooks via the

26// global cache so that worktrees that missed a syncClaudeConfig run still

dist/lib/gh-remote.jsView file

Lines 1-39javascript

1/**

2 * GitHub remote auto-setup helper for `mx-agent new`.

3 *

4 * Opt-in via --with-remote. Fails open: any failure (gh missing, not

5 * authenticated, repo already exists, network error) downgrades to a

6 * warning and returns { created: false, reason } so the caller can

7 * still print the manual remote-setup hint.

8 *

9 * Security: all arguments are passed as argv to spawnSync (never through

10 * a shell). projectName is validated upstream by validateProjectName().

11 * gh auth output is never captured into memories or telemetry.

dist/index.jsView file

Lines 25-65javascript

25import { runCreate } from './commands/create.js';

26import { runStart } from './commands/start.js';

27import { runUnlock } from './commands/unlock.js';

28import { runList } from './commands/list.js';

29import { runStatus } from './commands/status.js';

dist/commands/pr-sync.jsView file

Lines 33-73javascript

33 const result = spawnSync('gh', ['pr', 'view', String(prNumber),

34 '--repo', repo,

35 '--json', 'number,commits,state,mergedAt',

36 ], { encoding: 'utf-8', stdio: 'pipe' });

dist/agent-config/hooks/git-mutation-guard.shView file

•path = dist/agent-config/hooks/git-mutation-guard.sh kind = build_helper sizeBytes = 11532 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/agent-config/hooks/git-mutation-guard.shView on unpkg

dist/commands/start.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @memnexus-ai/mx-agent-cli@0.1.166 matchedIdentity = npm:[redacted]:0.1.166 similarity = 0.794 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/start.jsView on unpkg

Source & flagged code

6 flagged · loading source

dist/lib/claude.jsView file

6import { basename, join } from 'path'; L7: import { execSync, spawn, spawnSync } from 'child_process'; L8: import { homedir } from 'os';

High

Child Process

Package source references child process execution.

dist/lib/claude.jsView on unpkg · L6

dist/lib/gh-remote.jsView file

19// 1. gh present? L20: const which = spawn('command', ['-v', 'gh'], { encoding: 'utf-8', stdio: 'pipe', shell: true }); L21: if (which.status !== 0) {

High

Shell

Package source references shell execution.

dist/lib/gh-remote.jsView on unpkg · L19

dist/index.jsView file

45const __dirname = dirname(fileURLToPath(import.meta.url)); L46: const require = createRequire(import.meta.url); L47: const pkg = require(join(__dirname, '../package.json'));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L45

dist/commands/pr-sync.jsView file

53const apiUrl = options.apiUrl || getConfigValue('observability-api-url') || DEFAULT_API_URL; L54: const apiToken = options.apiToken || getConfigValue('observability-api-token') || process.env.OBSERVABILITY_API_TOKEN; L55: if (!apiToken) { ... L59: } L60: if (apiUrl && !apiUrl.startsWith('http://') && !apiUrl.startsWith('https://')) { L61: if (!quiet) ... L65: // Detect repo from gh CLI L66: const repoResult = spawnSync('gh', ['repo', 'view', '--json', 'nameWithOwner', '--jq', '.nameWithOwner'], { L67: encoding: 'utf-8', stdio: 'pipe',

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/pr-sync.jsView on unpkg · L53

dist/agent-config/hooks/git-mutation-guard.shView file

•path = dist/agent-config/hooks/git-mutation-guard.sh kind = build_helper sizeBytes = 11532 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/agent-config/hooks/git-mutation-guard.shView on unpkg

dist/commands/start.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/start.jsView on unpkg

Findings

4 High5 Medium7 Low

HighChild Processdist/lib/claude.js

HighShelldist/lib/gh-remote.js

HighSame File Env Network Executiondist/commands/pr-sync.js

HighPrevious Version Dangerous Deltadist/commands/start.js

MediumDynamic Requiredist/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/agent-config/hooks/git-mutation-guard.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

dist/lib/claude.jsView file

Lines 1-26javascript

1/**

2 * CLAUDE.md deployment, CLAUDE.local.md generation, and session start.

3 * Mirrors the patterns in dev-tools/worktree-cli/src/operations.ts.

4 */

5import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'fs';

6import { basename, join } from 'path';

7import { execSync, spawn, spawnSync } from 'child_process';

8import { homedir } from 'os';

High

Child Process

Package source references child process execution.

dist/lib/claude.jsView on unpkg · L6

9import chalk from 'chalk';

10import { BOOTSTRAP_SETTINGS_JSON } from './templates.js';

11import { removeLock, updateChildPid } from './leader-lock.js';

12// ── Logging helpers ───────────────────────────────────────────────────

13export function logSuccess(msg) {

14 console.log(chalk.green(' ✓ ' + msg));

15}

16export function logWarning(msg) {

17 console.log(chalk.yellow(' ⚠ ' + msg));

18}

19export function logDim(msg) {

20 console.log(chalk.dim(' ' + msg));

21}

22// Base hooks that are deployed to every worktree regardless of project

23const BASE_HOOK_NAMES = ['auto-checkpoint.sh', 'reload-checkpoint.sh'];

24// CI validation hooks — intercept git push and run package validators.

25// Deployed by syncClaudeConfig; also reconciled by deployBaseHooks via the

26// global cache so that worktrees that missed a syncClaudeConfig run still

dist/lib/gh-remote.jsView file

Lines 1-39javascript

1/**

2 * GitHub remote auto-setup helper for `mx-agent new`.

3 *

4 * Opt-in via --with-remote. Fails open: any failure (gh missing, not

5 * authenticated, repo already exists, network error) downgrades to a

6 * warning and returns { created: false, reason } so the caller can

7 * still print the manual remote-setup hint.

8 *

9 * Security: all arguments are passed as argv to spawnSync (never through

10 * a shell). projectName is validated upstream by validateProjectName().

11 * gh auth output is never captured into memories or telemetry.

dist/index.jsView file

Lines 25-65javascript

25import { runCreate } from './commands/create.js';

26import { runStart } from './commands/start.js';

27import { runUnlock } from './commands/unlock.js';

28import { runList } from './commands/list.js';

29import { runStatus } from './commands/status.js';

dist/commands/pr-sync.jsView file

Lines 33-73javascript

33 const result = spawnSync('gh', ['pr', 'view', String(prNumber),

34 '--repo', repo,

35 '--json', 'number,commits,state,mergedAt',

36 ], { encoding: 'utf-8', stdio: 'pipe' });

dist/agent-config/hooks/git-mutation-guard.shView file

•path = dist/agent-config/hooks/git-mutation-guard.sh kind = build_helper sizeBytes = 11532 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/agent-config/hooks/git-mutation-guard.shView on unpkg

dist/commands/start.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/start.jsView on unpkg