registry / @momentiq/dark-factory-cli / 3.0.2

@momentiq/dark-factory-cli@3.0.2

Dark Factory OSS CLI — multi-vendor adversarial critic orchestration (Cursor, Codex, Gemini, Grok) with min-complete-quorum aggregation and trusted-surface rebind

Static Scan Results

scanned 4h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 159 file(s), 1.61 MB of source, external domains: api.x.ai, cursor.com, docs.doppler.com, github.com, openrouter.ai

Source & flagged code

3 flagged

dist/mcp/tools/review-bypass.jsView file

Lines 180-220javascript

180 // mirror cli.ts ADAPTER_LOADERS so MCP df_review can load the cursor-cli

181 // adapter the checked-in local profile requires (quorum-2 restore).

182 { id: "cursor-cli", modulePath: "../../adapters/cursor-cli.js", className: "CursorCliAdapter" },

183 { id: "codex-sdk", modulePath: "../../adapters/codex-sdk.js", className: "CodexSdkAdapter" },

184 { id: "gemini-sdk", modulePath: "../../adapters/gemini-sdk.js", className: "GeminiSdkAdapter" },

185 { id: "grok-direct-sdk", modulePath: "../../adapters/grok-direct-sdk.js", className: "GrokDirectSdkAdapter" },

186 // Cycle 20 — MiniMax M3 via OpenRouter.

187 { id: "minimax-direct-sdk", modulePath: "../../adapters/minimax-direct-sdk.js", className: "MinimaxDirectSdkAdapter" },

188 // Consumer DFP #107 — mirror cli.ts ADAPTER_LOADERS + the MCP doctor

189 // list so the review-bypass adapter registry knows about

190 // static-schema-lint when a consumer wires it.

191 { id: "static-schema-lint", modulePath: "../../adapters/static-schema-lint.js", className: "StaticSchemaLintAdapter" },

192 // Cycle 27 Phase C — the deterministic ModeScope scope critic (registered by

193 // `df mode init`). Must mirror cli.ts ADAPTER_LOADERS so MCP df_review loads a

194 // `mode-scope` config identically to the CLI path (#305/#330 parity).

195 { id: "mode-scope", modulePath: "../../adapters/mode-scope.js", className: "ModeScopeAdapter" },

196];

197async function buildAdapterRegistry() {

198 const registry = new AdapterRegistry();

199 for (const loader of ADAPTER_LOADERS) {

200 try {

201 const mod = (await import(loader.modulePath));

202 const Ctor = mod[loader.className];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/mcp/tools/review-bypass.jsView on unpkg · L200

203 if (typeof Ctor === "function") {

204 registry.register(new Ctor());

205 }

206 }

207 catch {

208 // adapter unloadable — runReview will degrade per its

209 // min-complete-quorum semantics.

210 }

211 }

212 return registry;

213}

214export function registerReviewBypassTools(server, opts = {}) {

215 // Per-server job registry. Each createMcpServer() call gets its

216 // own Map (created on registration), so tests don't leak job state

217 // across `createMcpServer({ cwd: fixtureA })` /

218 // `createMcpServer({ cwd: fixtureB })` invocations.

219 const jobs = new Map();

220 const runReviewFn = opts._internalRunReview ?? runReview;

dist/adapters/gemini-sdk.jsView file

Lines 12-52javascript

12// The adapter:

13// - implements `CriticAdapter` from `critic.ts` (post-Component-3

14// migration, which adds `requiredEnvVars`)

15// - mirrors the 322.1 retry shape (`runRetryLoop` + `attemptReview`)

16// from a single source of truth in `cursor-sdk.ts`, so the policy +

17// budget are byte-identical across adapters and any future fix lands

18// in one place

19// - routes diagnostic-redaction + JSON parsing + reviewer-metadata merge

20// + error-result construction through `_shared.ts` so the security

21// boundary (redactSecrets at the only writeFileSync site) cannot drift

dist/cycle-tracker-sync/sync_cycle_trackers.pyView file

•path = dist/cycle-tracker-sync/sync_cycle_trackers.py kind = build_helper sizeBytes = 48022 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cycle-tracker-sync/sync_cycle_trackers.pyView on unpkg

Source & flagged code

3 flagged · loading source

dist/mcp/tools/review-bypass.jsView file

200try { L201: const mod = (await import(loader.modulePath)); L202: const Ctor = mod[loader.className];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/mcp/tools/review-bypass.jsView on unpkg · L200

dist/adapters/gemini-sdk.jsView file

32package = @momentiq/dark-factory-cli; repositoryIdentity = dark-factory; dependency = @google/genai L32: // time — this matches the testing posture of the cycle 322.1 retry tests. L33: import { ApiError, GoogleGenAI, } from "@google/genai"; L34: import { compileCriticPrompt } from "../prompt.js";

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/adapters/gemini-sdk.jsView on unpkg · L32

dist/cycle-tracker-sync/sync_cycle_trackers.pyView file

•path = dist/cycle-tracker-sync/sync_cycle_trackers.py kind = build_helper sizeBytes = 48022 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cycle-tracker-sync/sync_cycle_trackers.pyView on unpkg

Findings

1 High5 Medium4 Low

HighCopied Package Dependency Bridgedist/adapters/gemini-sdk.js

MediumDynamic Requiredist/mcp/tools/review-bypass.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/cycle-tracker-sync/sync_cycle_trackers.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/mcp/tools/review-bypass.jsView file

Lines 180-220javascript

180 // mirror cli.ts ADAPTER_LOADERS so MCP df_review can load the cursor-cli

181 // adapter the checked-in local profile requires (quorum-2 restore).

182 { id: "cursor-cli", modulePath: "../../adapters/cursor-cli.js", className: "CursorCliAdapter" },

183 { id: "codex-sdk", modulePath: "../../adapters/codex-sdk.js", className: "CodexSdkAdapter" },

184 { id: "gemini-sdk", modulePath: "../../adapters/gemini-sdk.js", className: "GeminiSdkAdapter" },

185 { id: "grok-direct-sdk", modulePath: "../../adapters/grok-direct-sdk.js", className: "GrokDirectSdkAdapter" },

186 // Cycle 20 — MiniMax M3 via OpenRouter.

187 { id: "minimax-direct-sdk", modulePath: "../../adapters/minimax-direct-sdk.js", className: "MinimaxDirectSdkAdapter" },

188 // Consumer DFP #107 — mirror cli.ts ADAPTER_LOADERS + the MCP doctor

189 // list so the review-bypass adapter registry knows about

190 // static-schema-lint when a consumer wires it.

191 { id: "static-schema-lint", modulePath: "../../adapters/static-schema-lint.js", className: "StaticSchemaLintAdapter" },

192 // Cycle 27 Phase C — the deterministic ModeScope scope critic (registered by

193 // `df mode init`). Must mirror cli.ts ADAPTER_LOADERS so MCP df_review loads a

194 // `mode-scope` config identically to the CLI path (#305/#330 parity).

195 { id: "mode-scope", modulePath: "../../adapters/mode-scope.js", className: "ModeScopeAdapter" },

196];

197async function buildAdapterRegistry() {

198 const registry = new AdapterRegistry();

199 for (const loader of ADAPTER_LOADERS) {

200 try {

201 const mod = (await import(loader.modulePath));

202 const Ctor = mod[loader.className];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/mcp/tools/review-bypass.jsView on unpkg · L200

203 if (typeof Ctor === "function") {

204 registry.register(new Ctor());

205 }

206 }

207 catch {

208 // adapter unloadable — runReview will degrade per its

209 // min-complete-quorum semantics.

210 }

211 }

212 return registry;

213}

214export function registerReviewBypassTools(server, opts = {}) {

215 // Per-server job registry. Each createMcpServer() call gets its

216 // own Map (created on registration), so tests don't leak job state

217 // across `createMcpServer({ cwd: fixtureA })` /

218 // `createMcpServer({ cwd: fixtureB })` invocations.

219 const jobs = new Map();

220 const runReviewFn = opts._internalRunReview ?? runReview;

dist/adapters/gemini-sdk.jsView file

Lines 12-52javascript

12// The adapter:

13// - implements `CriticAdapter` from `critic.ts` (post-Component-3

14// migration, which adds `requiredEnvVars`)

15// - mirrors the 322.1 retry shape (`runRetryLoop` + `attemptReview`)

16// from a single source of truth in `cursor-sdk.ts`, so the policy +

17// budget are byte-identical across adapters and any future fix lands

18// in one place

19// - routes diagnostic-redaction + JSON parsing + reviewer-metadata merge

20// + error-result construction through `_shared.ts` so the security

21// boundary (redactSecrets at the only writeFileSync site) cannot drift

dist/cycle-tracker-sync/sync_cycle_trackers.pyView file

•path = dist/cycle-tracker-sync/sync_cycle_trackers.py kind = build_helper sizeBytes = 48022 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/cycle-tracker-sync/sync_cycle_trackers.pyView on unpkg