registry / @mesosfer-org/ozon-cli / 1.4.15

@mesosfer-org/ozon-cli@1.4.15

CLI Agent for Ozon

Static Scan Results

scanned 17d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 36 file(s), 218 KB of source, external domains: 127.0.0.1, api.openai.com, api.ozon.my.id, generativelanguage.googleapis.com, registry.npmjs.org

Source & flagged code

3 flagged

dist/utils/background.jsView file

Lines 1-22javascript

1import fs from 'fs';

2import path from 'path';

3import { fork } from 'child_process';

4import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

dist/utils/background.jsView on unpkg · L2

5function sessionsDir(projectRoot) {

6 return path.join(projectRoot, '.ozon', 'sessions');

8function sessionDir(projectRoot, id) {

9 return path.join(sessionsDir(projectRoot), id);

10}

11function generateId() {

12 return Math.random().toString(36).substring(2, 10);

13}

14const BACKEND_URL = process.env.OZON_BACKEND_URL || 'http://127.0.0.1:8089';

15export function createSession(prompt, token, projectRoot) {

16 const id = generateId();

17 const dir = sessionDir(projectRoot, id);

18 fs.mkdirSync(dir, { recursive: true });

19 const task = {

20 prompt,

21 projectRoot,

22 createdAt: new Date().toISOString(),

dist/utils/tools.jsView file

Lines 1-23javascript

1import fs from 'fs/promises';

2import { existsSync } from 'fs';

3import path from 'path';

4import { execa } from 'execa';

Source & flagged code

3 flagged · loading source

dist/utils/background.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code