registry / @mesosfer-org/ozon-cli / 1.4.5

@mesosfer-org/ozon-cli@1.4.5

CLI Agent for Ozon

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 12 file(s), 131 KB of source, external domains: 127.0.0.1

Source & flagged code

3 flagged

dist/utils/background.jsView file

Lines 1-22javascript

1import fs from 'fs';

2import path from 'path';

3import { fork } from 'child_process';

4function sessionsDir(projectRoot) {

High

Child Process

Package source references child process execution.

dist/utils/background.jsView on unpkg · L2

5 return path.join(projectRoot, '.agent', 'sessions');

7function sessionDir(projectRoot, id) {

8 return path.join(sessionsDir(projectRoot), id);

10function generateId() {

11 return Math.random().toString(36).substring(2, 10);

12}

13const BACKEND_URL = process.env.OZON_BACKEND_URL || 'http://127.0.0.1:8089';

14export function createSession(prompt, token, projectRoot) {

15 const id = generateId();

16 const dir = sessionDir(projectRoot, id);

17 fs.mkdirSync(dir, { recursive: true });

18 const task = {

19 prompt,

20 projectRoot,

21 createdAt: new Date().toISOString(),

22 };

dist/index.jsView file

Lines 1-24javascript

1#!/usr/bin/env node

2import { intro, outro, select, spinner } from '@clack/prompts';

3import pc from 'picocolors';

4import { Command } from 'commander';

5import { execa } from

Source & flagged code

3 flagged · loading source

dist/utils/background.jsView file

2import path from 'path'; L3: import { fork } from 'child_process'; L4: function sessionsDir(projectRoot) {

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code