registry / @nexus-cortex/cli / 4.47.3

@nexus-cortex/cli@4.47.3

Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis completed at 93.0% confidence. No malicious behavior was detected; 13 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 108 file(s), 518 KB of source, external domains: browser.spitfire-products.com, registry.npmjs.org

Source & flagged code

6 flagged

bin/cortex.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

3/**

4 * cortex — Natural language interface to the Nexus Cortex library

5 *

6 * Usage:

7 * cortex "Read package.json and tell me the version"

8 * cortex --model deepseek-v4-flash "Explain generics"

9 * cortex --resume abc123 "Continue from where we left off"

10 * cortex --new "Start a fresh conversation"

11 * cortex --json "Give me raw response"

12 * cortex --stats

13 * cortex --sessions

14 *

15 * Connects to a running Nexus Cortex server (default: localhost:4000).

16 * If no server is running, prints instructions to start one.

17 *

18 * Designed for:

19 * - Quick natural language queries from the shell

20 * - Agent-to-agent communication (invoke as a task tool)

21 * - Scripting and pipeline integration (--json mode)

22 * - Multi-turn conversations via session resume

23 */

25import { spawn, spawnSync } from 'child_process';

26import { fileURLToPath } from 'url';

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cortex.jsView on unpkg · L6

High

Child Process

Package source references child process execution.

bin/cortex.jsView on unpkg · L24

27import { dirname, join, resolve } from 'path';

28import { existsSync, readFileSync, realpathSync, mkdirSync, openSync, writeFileSync, copyFileSync } from 'fs';

29import { homedir } from 'os';

30import { createRequire } from 'module';

32const __cortex_require = createRequire(import.meta.url);

33const __cortex_filename = fileURLToPath(import.meta.url);

34const __cortex_dirname = dirname(realpathSync(__cortex_filename));

35const MONOREPO_ROOT = resolve(__cortex_dirname, '..', '..', '..');

37// Locate the server entry. From a git clone it's the monorepo's built server;

38// from an npm install (`@nexus-cortex/cli` alongside `@nexus-cortex/server`) it's

39// resolved through node_modules. Falls back to the monorepo path so the

40// "not found" guidance in startServer() still fires when neither exists.

41function resolveServerEntry() {

42 const monorepoServer = join(MONOREPO_ROOT, 'packages', 'server', 'dist', 'index.js');

43 if (existsSync(monorepoServer)) return monorepoServer;

44 try {

dist/commands/mcp/edit.jsView file

Lines 13-53javascript

13 try {

14 // Check if file exists

15 const fs = await import('fs/promises');

16 try {

17 await fs.access(configPath);

18 }

dist/commands/autoresearch/repoResolve.jsView file

Lines 1-33javascript

1/**

2 * repoResolve — turn a `--repo`/`--base-dir` value into a usable local checkout, and

3 * resolve task-set paths against it.

4 *

5 * The autoresearch CLI accepts either a LOCAL path (today's behaviour) or a PUBLIC

6 * http(s) git URL. For a URL we shallow-clone it credential-free into a stable temp

7 * dir and reuse the clone on subsequent calls (idempotent). PUBLIC repos only — no

8 * token/credential handling is added here on purpose.

9 *

10 * `resolveTaskSet` lets a caller reference a task-set that lives INSIDE the repo: when

11 * the task-set path is relative and a repo dir is given, it resolves against the

dist/commands/autoresearch/harnessProcess.jsView file

Lines 1-30javascript

1/**

2 * harnessProcess — process lifecycle for benching a built harness.

3 *

4 * `cortex autoresearch experiment` needs to run TWO harness builds (base +

5 * candidate) as live servers so the bench can actually exercise different code.

6 * This module owns the subprocess side: build a checkout, start its server on an

7 * isolated port, health-check it, and tear it down. `serverRunner` is the

8 * `HarnessRunner` that POSTs prompts to a running server (shared with

9 * `cortex autoresearch bench`).

10 */

11import

Source & flagged code

6 flagged · loading source

bin/cortex.jsView file

24L25: import { spawn, spawnSync } from 'child_process'; L26: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/cortex.jsView on unpkg · L24

6Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L6: * Usage: L7: * cortex "Read package.json and tell me the version" L8: * cortex --model deepseek-v4-flash "Explain generics" ... L24: L25: import { spawn, spawnSync } from 'child_process'; L26: import { fileURLToPath } from 'url'; ... L56: const CLI_PKG_ROOT = resolve(__cortex_dirname, '..'); L57: if (!process.env.CORTEX_ROOT) { L58: if (existsSync(join(MONOREPO_ROOT, '.cortex'))) process.env.CORTEX_ROOT = MONOREPO_ROOT; ... L62: const BASE_PORT = process.env.PORT || '4000'; L63: const BASE_URL = process.env.CORTEX_URL || `http://localhost:${BASE_PORT}`; L64:

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cortex.jsView on unpkg · L6

dist/commands/mcp/edit.jsView file

33stdio: 'inherit', L34: shell: true L35: });

High

Shell

Package source references shell execution.

dist/commands/mcp/edit.jsView on unpkg · L33

dist/commands/autoresearch/repoResolve.jsView file

13*/ L14: import { execFileSync } from 'node:child_process'; L15: import { createHash } from 'node:crypto'; ... L43: // Hard-disable any interactive credential/host prompt: PUBLIC repos only. L44: env: { ...process.env, GIT_TERMINAL_PROMPT: '0' }, L45: });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/autoresearch/repoResolve.jsView on unpkg · L13

dist/commands/autoresearch/harnessProcess.jsView file

10*/ L11: import { spawn } from 'node:child_process'; L12: import * as net from 'node:net'; L13: import * as path from 'node:path'; ... L18: // bench its own long-timeout dispatcher (override: CORTEX_BENCH_FETCH_TIMEOUT_MS). L19: const BENCH_FETCH_TIMEOUT_MS = parseInt(process.env.CORTEX_BENCH_FETCH_TIMEOUT_MS || '900000', 10); L20: const benchDispatcher = new Agent({

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/autoresearch/harnessProcess.jsView on unpkg · L10

•matchType = previous_version_dangerous_delta matchedPackage = @nexus-cortex/cli@4.45.0 matchedIdentity = npm:QG5leHVzLWNvcnRleC9jbGk:4.45.0 similarity = 0.971 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/commands/autoresearch/harnessProcess.jsView on unpkg

Findings

5 High3 Medium5 Low

HighChild Processbin/cortex.js

HighShelldist/commands/mcp/edit.js

HighEntrypoint Build Divergencebin/cortex.js

HighSame File Env Network Executiondist/commands/autoresearch/harnessProcess.js

HighPrevious Version Dangerous Deltadist/commands/autoresearch/harnessProcess.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/commands/autoresearch/repoResolve.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

bin/cortex.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

3/**

4 * cortex — Natural language interface to the Nexus Cortex library

5 *

6 * Usage:

7 * cortex "Read package.json and tell me the version"

8 * cortex --model deepseek-v4-flash "Explain generics"

9 * cortex --resume abc123 "Continue from where we left off"

10 * cortex --new "Start a fresh conversation"

11 * cortex --json "Give me raw response"

12 * cortex --stats

13 * cortex --sessions

14 *

15 * Connects to a running Nexus Cortex server (default: localhost:4000).

16 * If no server is running, prints instructions to start one.

17 *

18 * Designed for:

19 * - Quick natural language queries from the shell

20 * - Agent-to-agent communication (invoke as a task tool)

21 * - Scripting and pipeline integration (--json mode)

22 * - Multi-turn conversations via session resume

23 */

25import { spawn, spawnSync } from 'child_process';

26import { fileURLToPath } from 'url';

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cortex.jsView on unpkg · L6

High

Child Process

Package source references child process execution.

bin/cortex.jsView on unpkg · L24

27import { dirname, join, resolve } from 'path';

28import { existsSync, readFileSync, realpathSync, mkdirSync, openSync, writeFileSync, copyFileSync } from 'fs';

29import { homedir } from 'os';

30import { createRequire } from 'module';

32const __cortex_require = createRequire(import.meta.url);

33const __cortex_filename = fileURLToPath(import.meta.url);

34const __cortex_dirname = dirname(realpathSync(__cortex_filename));

35const MONOREPO_ROOT = resolve(__cortex_dirname, '..', '..', '..');

37// Locate the server entry. From a git clone it's the monorepo's built server;

38// from an npm install (`@nexus-cortex/cli` alongside `@nexus-cortex/server`) it's

39// resolved through node_modules. Falls back to the monorepo path so the

40// "not found" guidance in startServer() still fires when neither exists.

41function resolveServerEntry() {

42 const monorepoServer = join(MONOREPO_ROOT, 'packages', 'server', 'dist', 'index.js');

43 if (existsSync(monorepoServer)) return monorepoServer;

44 try {

dist/commands/mcp/edit.jsView file

Lines 13-53javascript

13 try {

14 // Check if file exists

15 const fs = await import('fs/promises');

16 try {

17 await fs.access(configPath);

18 }

dist/commands/autoresearch/repoResolve.jsView file

Lines 1-33javascript

1/**

2 * repoResolve — turn a `--repo`/`--base-dir` value into a usable local checkout, and

3 * resolve task-set paths against it.

4 *

5 * The autoresearch CLI accepts either a LOCAL path (today's behaviour) or a PUBLIC

6 * http(s) git URL. For a URL we shallow-clone it credential-free into a stable temp

7 * dir and reuse the clone on subsequent calls (idempotent). PUBLIC repos only — no

8 * token/credential handling is added here on purpose.

9 *

10 * `resolveTaskSet` lets a caller reference a task-set that lives INSIDE the repo: when

11 * the task-set path is relative and a repo dir is given, it resolves against the

dist/commands/autoresearch/harnessProcess.jsView file

Lines 1-30javascript

1/**

2 * harnessProcess — process lifecycle for benching a built harness.

3 *

4 * `cortex autoresearch experiment` needs to run TWO harness builds (base +

5 * candidate) as live servers so the bench can actually exercise different code.

6 * This module owns the subprocess side: build a checkout, start its server on an

7 * isolated port, health-check it, and tear it down. `serverRunner` is the

8 * `HarnessRunner` that POSTs prompts to a running server (shared with

9 * `cortex autoresearch bench`).

10 */

11import