registry / @nexus-cortex/cli / 4.44.2

@nexus-cortex/cli@4.44.2

Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 12 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 106 file(s), 488 KB of source, external domains: browser.spitfire-products.com, registry.npmjs.org

Source & flagged code

5 flagged

bin/cortex.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

3/**

4 * cortex — Natural language interface to the Nexus Cortex library

5 *

6 * Usage:

7 * cortex "Read package.json and tell me the version"

8 * cortex --model deepseek-v4-flash "Explain generics"

9 * cortex --resume abc123 "Continue from where we left off"

10 * cortex --new "Start a fresh conversation"

11 * cortex --json "Give me raw response"

12 * cortex --stats

13 * cortex --sessions

14 *

15 * Connects to a running Nexus Cortex server (default: localhost:4000).

16 * If no server is running, prints instructions to start one.

17 *

18 * Designed for:

19 * - Quick natural language queries from the shell

20 * - Agent-to-agent communication (invoke as a task tool)

21 * - Scripting and pipeline integration (--json mode)

22 * - Multi-turn conversations via session resume

23 */

25import { spawn, spawnSync } from 'child_process';

26import { fileURLToPath } from 'url';

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cortex.jsView on unpkg · L6

High

Child Process

Package source references child process execution.

bin/cortex.jsView on unpkg · L24

27import { dirname, join, resolve } from 'path';

28import { existsSync, readFileSync, realpathSync, mkdirSync, openSync, writeFileSync, copyFileSync } from 'fs';

29import { homedir } from 'os';

30import { createRequire } from 'module';

32const __cortex_require = createRequire(import.meta.url);

33const __cortex_filename = fileURLToPath(import.meta.url);

34const __cortex_dirname = dirname(realpathSync(__cortex_filename));

35const MONOREPO_ROOT = resolve(__cortex_dirname, '..', '..', '..');

37// Locate the server entry. From a git clone it's the monorepo's built server;

38// from an npm install (`@nexus-cortex/cli` alongside `@nexus-cortex/server`) it's

39// resolved through node_modules. Falls back to the monorepo path so the

40// "not found" guidance in startServer() still fires when neither exists.

41function resolveServerEntry() {

42 const monorepoServer = join(MONOREPO_ROOT, 'packages', 'server', 'dist', 'index.js');

43 if (existsSync(monorepoServer)) return monorepoServer;

44 try {

dist/commands/mcp/edit.jsView file

Lines 13-53javascript

13 try {

14 // Check if file exists

15 const fs = await import('fs/promises');

16 try {

17 await fs.access(configPath);

18 }

dist/commands/autoresearch/repoResolve.jsView file

Lines 1-33javascript

1/**

2 * repoResolve — turn a `--repo`/`--base-dir` value into a usable local checkout, and

3 * resolve task-set paths against it.

4 *

5 * The autoresearch CLI accepts either a LOCAL path (today's behaviour) or a PUBLIC

6 * http(s) git URL. For a URL we shallow-clone it credential-free into a stable temp

7 * dir and reuse the clone on subsequent calls (idempotent). PUBLIC repos only — no

8 * token/credential handling is added here on purpose.

9 *

10 * `resolveTaskSet` lets a caller reference a task-set that lives INSIDE the repo: when

11 * the task-set path is relative and a repo dir is given, it resolves against the

dist/commands/autoresearch/harnessProcess.jsView file

Lines 75-115javascript

75/** `npm run build` in a checkout. Rejects on non-zero exit (build.sh exits 0 on

76 * the expected/suppressed executors Pass-1 errors, so a non-zero here is real). */

77export function buildDir(dir, log) {

78 return new Promise((resolve, reject) => {

79 log(`build ${

Source & flagged code

5 flagged · loading source

bin/cortex.jsView file

24L25: import { spawn, spawnSync } from 'child_process'; L26: import { fileURLToPath } from 'url';

High

Child Process

Package source references child process execution.

bin/cortex.jsView on unpkg · L24

6Manifest entrypoint (manifest.bin) carries capability families absent from dist/build output: environment+network, sensitive-file+network, execution+network L6: * Usage: L7: * cortex "Read package.json and tell me the version" L8: * cortex --model deepseek-v4-flash "Explain generics" ... L24: L25: import { spawn, spawnSync } from 'child_process'; L26: import { fileURLToPath } from 'url'; ... L56: const CLI_PKG_ROOT = resolve(__cortex_dirname, '..'); L57: if (!process.env.CORTEX_ROOT) { L58: if (existsSync(join(MONOREPO_ROOT, '.cortex'))) process.env.CORTEX_ROOT = MONOREPO_ROOT; ... L62: const BASE_PORT = process.env.PORT || '4000'; L63: const BASE_URL = process.env.CORTEX_URL || `http://localhost:${BASE_PORT}`; L64:

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cortex.jsView on unpkg · L6

dist/commands/mcp/edit.jsView file

33stdio: 'inherit', L34: shell: true L35: });

High

Shell

Package source references shell execution.

dist/commands/mcp/edit.jsView on unpkg · L33

dist/commands/autoresearch/repoResolve.jsView file

13*/ L14: import { execFileSync } from 'node:child_process'; L15: import { createHash } from 'node:crypto'; ... L43: // Hard-disable any interactive credential/host prompt: PUBLIC repos only. L44: env: { ...process.env, GIT_TERMINAL_PROMPT: '0' }, L45: });

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/commands/autoresearch/repoResolve.jsView on unpkg · L13

dist/commands/autoresearch/harnessProcess.jsView file

95log(`serve ${dir} on :${port}`); L96: const proc = spawn('node', [entry], { L97: cwd: dir, ... L101: // regardless of cwd, so a candidate's project-level config actually takes. L102: env: { ...process.env, PORT: String(port), PROJECT_PATH: dir, PROJECT_ROOT: dir, MODEL_ROUTER_RECORD: 'false' }, L103: stdio: ['ignore', 'ignore', 'pipe'], ... L108: proc.once('exit', () => { exited = true; }); L109: const url = `http://localhost:${port}`; L110: const stop = () => { try {

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/commands/autoresearch/harnessProcess.jsView on unpkg · L95

Findings

4 High3 Medium5 Low

HighChild Processbin/cortex.js

HighShelldist/commands/mcp/edit.js

HighEntrypoint Build Divergencebin/cortex.js

HighSame File Env Network Executiondist/commands/autoresearch/harnessProcess.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/commands/autoresearch/repoResolve.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

5 flagged

bin/cortex.jsView file

Lines 1-44javascript

1#!/usr/bin/env node

3/**

4 * cortex — Natural language interface to the Nexus Cortex library

5 *

6 * Usage:

7 * cortex "Read package.json and tell me the version"

8 * cortex --model deepseek-v4-flash "Explain generics"

9 * cortex --resume abc123 "Continue from where we left off"

10 * cortex --new "Start a fresh conversation"

11 * cortex --json "Give me raw response"

12 * cortex --stats

13 * cortex --sessions

14 *

15 * Connects to a running Nexus Cortex server (default: localhost:4000).

16 * If no server is running, prints instructions to start one.

17 *

18 * Designed for:

19 * - Quick natural language queries from the shell

20 * - Agent-to-agent communication (invoke as a task tool)

21 * - Scripting and pipeline integration (--json mode)

22 * - Multi-turn conversations via session resume

23 */

25import { spawn, spawnSync } from 'child_process';

26import { fileURLToPath } from 'url';

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

bin/cortex.jsView on unpkg · L6

High

Child Process

Package source references child process execution.

bin/cortex.jsView on unpkg · L24

27import { dirname, join, resolve } from 'path';

28import { existsSync, readFileSync, realpathSync, mkdirSync, openSync, writeFileSync, copyFileSync } from 'fs';

29import { homedir } from 'os';

30import { createRequire } from 'module';

32const __cortex_require = createRequire(import.meta.url);

33const __cortex_filename = fileURLToPath(import.meta.url);

34const __cortex_dirname = dirname(realpathSync(__cortex_filename));

35const MONOREPO_ROOT = resolve(__cortex_dirname, '..', '..', '..');

37// Locate the server entry. From a git clone it's the monorepo's built server;

38// from an npm install (`@nexus-cortex/cli` alongside `@nexus-cortex/server`) it's

39// resolved through node_modules. Falls back to the monorepo path so the

40// "not found" guidance in startServer() still fires when neither exists.

41function resolveServerEntry() {

42 const monorepoServer = join(MONOREPO_ROOT, 'packages', 'server', 'dist', 'index.js');

43 if (existsSync(monorepoServer)) return monorepoServer;

44 try {

dist/commands/mcp/edit.jsView file

Lines 13-53javascript

13 try {

14 // Check if file exists

15 const fs = await import('fs/promises');

16 try {

17 await fs.access(configPath);

18 }

dist/commands/autoresearch/repoResolve.jsView file

Lines 1-33javascript

1/**

2 * repoResolve — turn a `--repo`/`--base-dir` value into a usable local checkout, and

3 * resolve task-set paths against it.

4 *

5 * The autoresearch CLI accepts either a LOCAL path (today's behaviour) or a PUBLIC

6 * http(s) git URL. For a URL we shallow-clone it credential-free into a stable temp

7 * dir and reuse the clone on subsequent calls (idempotent). PUBLIC repos only — no

8 * token/credential handling is added here on purpose.

9 *

10 * `resolveTaskSet` lets a caller reference a task-set that lives INSIDE the repo: when

11 * the task-set path is relative and a repo dir is given, it resolves against the

dist/commands/autoresearch/harnessProcess.jsView file

Lines 75-115javascript

75/** `npm run build` in a checkout. Rejects on non-zero exit (build.sh exits 0 on

76 * the expected/suppressed executors Pass-1 errors, so a non-zero here is real). */

77export function buildDir(dir, log) {

78 return new Promise((resolve, reject) => {

79 log(`build ${