registry / @ownware/cortex / 0.2.0

@ownware/cortex@0.2.0

The Ownware kernel & gateway — profiles, threads, HTTP+SSE gateway, credential vault, and the `ownware` CLI.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 314 file(s), 2.91 MB of source, external domains: 127.0.0.1, accounts.google.com, api.anthropic.com, api.github.com, api.groq.com, api.notion.com, api.openai.com, api.search.brave.com, api.slack.com, avatars.githubusercontent.com, backend.composio.dev, console.cloud.google.com, dashboard.stripe.com, developer.microsoft.com, developers.google.com, developers.hubspot.com, docs.mixpanel.com, duckduckgo.com, entra.microsoft.com, fonts.googleapis.com, generativelanguage.googleapis.com, gist.github.com, github.com, gitlab.com, linear.app, login.microsoftonline.com, mcp.atlassian.com, mcp.figma.com, mcp.mixpanel.com, oauth2.googleapis.com, openrouter.ai, perplexity.ai, platform.composio.dev, raw.githubusercontent.com, registry.modelcontextprotocol.io, search.brave.com, slack.com, tavily.com, www.figma.com, www.googleapis.com, www.notion.so

Source & flagged code

6 flagged

package.jsonView file

Lines 6-46json

6 "main": "./dist/index.js",

7 "types": "./dist/index.d.ts",

8 "bin": {

9 "ownware": "./dist/cli.js"

10 },

11 "exports": {

12 ".": {

13 "import": "./dist/index.js",

14 "types": "./dist/index.d.ts"

15 },

16 "./events": {

17 "import": "./dist/gateway/events.js",

18 "types": "./dist/gateway/events.d.ts"

19 },

20 "./cli": {

21 "import": "./dist/cli.js",

22 "types": "./dist/cli.d.ts"

23 }

24 },

25 "scripts": {

26 "postinstall": "node scripts/fix-node-pty-permissions.mjs && node scripts/ensure-ripgrep-binary.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L26

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L26

27 "rebuild:electron": "bash scripts/rebuild-native-for-electron.sh",

28 "rebuild:node": "npm rebuild better-sqlite3 node-pty",

29 "promote": "bun run scripts/promote-profile.ts",

30 "build": "tsc && mkdir -p dist/connector/detection && cp src/connector/detection/known-apps.json dist/connector/detection/known-apps.json",

31 "bundle:gateway": "bun build dist/gateway/server.js --outfile dist/gateway-bundle.mjs --target node --format esm --external better-sqlite3 --external node-pty --external chokidar --external bindings --external fsevents --external playwright-core --external playwright --external chromium-bidi --external sharp --external @img/sharp-darwin-arm64 --external @img/sharp-darwin-x64 --external @img/sharp-linux-arm64 --external @img/sharp-linux-x64 --external @img/sharp-win32-x64 --external @img/sharp-libvips-darwin-arm64 --external @img/sharp-libvips-darwin-x64 --external @img/sharp-libvips-linux- ...

32 "dev": "tsc --build && node --watch --watch-path=dist dist/gateway/server.js",

33 "dev:watch": "tsc --watch",

34 "gateway": "node dist/gateway/server.js",

35 "test": "vitest run",

36 "test:unit": "vitest run tests/unit",

37 "test:integration": "vitest run tests/integration",

38 "test:e2e": "vitest run tests/e2e",

39 "test:db": "bash scripts/test-db.sh",

40 "test:watch": "vitest",

41 "typecheck": "tsc --noEmit",

42 "prepublishOnly": "bun run build && bun run test:unit"

43 },

44 "files": [

45 "dist",

46 "scripts/fix-node-pty-permissions.mjs",

Long lines were clipped for display.

dist/cli/channel.jsView file

Lines 3-43javascript

3 * docs (and the pairing message) advertise actually works on the main

4 * `ownware` bin:

5 *

6 * ownware channel add slack --profile assistant --bot-token … --app-token …

7 * ownware channel list | remove

dist/gateway/handlers/catalog.jsView file

Lines 78-118javascript

78 for (const key of Object.keys(value).sort()) {

79 out[key] = canonicalize(value[key]);

80 }

81 return out;

82 }

83 return value;

84}

dist/terminal/shell-integration.jsView file

Lines 1-30javascript

1/**

2 * Shell integration — VS Code-style OSC 633 markers for the agent shell.

3 *

4 * The agent shell is a shared INTERACTIVE shell (the human can watch / take

5 * over). Injecting a `printf` sentinel as a command is fragile there (the line

6 * editor drops bytes, mangles echo). The robust answer — what VS Code / Roo /

7 * Windsurf do — is to have the shell emit structured markers from its own

8 * `preexec`/`precmd` hooks:

9 *

10 * ESC ] 633 ; C ; <nonce> BEL command start (pre-exec)

11 * ESC ] 633 ; D ; <nonce> ; <code> BEL command finished + exit code (precmd)

dist/gateway/auth/principal-middleware.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @ownware/cortex@0.1.0 matchedIdentity = npm:QG93bndhcmUvY29ydGV4:0.1.0 similarity = 0.800 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/gateway/auth/principal-middleware.jsView on unpkg

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/fix-node-pty-permissions.mjs && node scripts/ensure-ripgrep-binary.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/fix-node-pty-permissions.mjs && node scripts/ensure-ripgrep-binary.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli/channel.jsView file

23try { L24: return (await import(specifier)); L25: }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/cli/channel.jsView on unpkg · L23

dist/gateway/handlers/catalog.jsView file

98return async function catalogHandler(req, res) { L99: const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`); L100: // Parse + Zod-validate query params. `featured` is a tri-state ... L159: res.writeHead(304, { ETag: etag }); L160: res.end(); L161: return;

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/gateway/handlers/catalog.jsView on unpkg · L98

dist/terminal/shell-integration.jsView file

10* ESC ] 633 ; C ; <nonce> BEL command start (pre-exec) L11: * ESC ] 633 ; D ; <nonce> ; <code> BEL command finished + exit code (precmd) L12: * ... L67: `; L68: // .zshrc — source the user's config, THEN install our hooks + clean prompt so we L69: // win over whatever the user set. Markers use printf octal escapes (\033 ESC, ... L120: export function prepareShellIntegration(opts) { L121: const processEnv = opts.processEnv ?? process.env; L122: const shell = opts.shell ?? processEnv['SHELL'] ?? '';

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/terminal/shell-integration.jsView on unpkg · L10

dist/gateway/auth/principal-middleware.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/gateway/auth/principal-middleware.jsView on unpkg

Findings

2 High6 Medium7 Low

HighInstall Time Lifecycle Scriptspackage.json

HighPrevious Version Dangerous Deltadist/gateway/auth/principal-middleware.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiredist/cli/channel.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/terminal/shell-integration.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/gateway/handlers/catalog.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

6 flagged

package.jsonView file

Lines 6-46json

6 "main": "./dist/index.js",

7 "types": "./dist/index.d.ts",

8 "bin": {

9 "ownware": "./dist/cli.js"

10 },

11 "exports": {

12 ".": {

13 "import": "./dist/index.js",

14 "types": "./dist/index.d.ts"

15 },

16 "./events": {

17 "import": "./dist/gateway/events.js",

18 "types": "./dist/gateway/events.d.ts"

19 },

20 "./cli": {

21 "import": "./dist/cli.js",

22 "types": "./dist/cli.d.ts"

23 }

24 },

25 "scripts": {

26 "postinstall": "node scripts/fix-node-pty-permissions.mjs && node scripts/ensure-ripgrep-binary.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L26

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L26

27 "rebuild:electron": "bash scripts/rebuild-native-for-electron.sh",

28 "rebuild:node": "npm rebuild better-sqlite3 node-pty",

29 "promote": "bun run scripts/promote-profile.ts",

30 "build": "tsc && mkdir -p dist/connector/detection && cp src/connector/detection/known-apps.json dist/connector/detection/known-apps.json",

32 "dev": "tsc --build && node --watch --watch-path=dist dist/gateway/server.js",

33 "dev:watch": "tsc --watch",

34 "gateway": "node dist/gateway/server.js",

35 "test": "vitest run",

36 "test:unit": "vitest run tests/unit",

37 "test:integration": "vitest run tests/integration",

38 "test:e2e": "vitest run tests/e2e",

39 "test:db": "bash scripts/test-db.sh",

40 "test:watch": "vitest",

41 "typecheck": "tsc --noEmit",

42 "prepublishOnly": "bun run build && bun run test:unit"

43 },

44 "files": [

45 "dist",

46 "scripts/fix-node-pty-permissions.mjs",

Long lines were clipped for display.

dist/cli/channel.jsView file

Lines 3-43javascript

3 * docs (and the pairing message) advertise actually works on the main

4 * `ownware` bin:

5 *

6 * ownware channel add slack --profile assistant --bot-token … --app-token …

7 * ownware channel list | remove

dist/gateway/handlers/catalog.jsView file

Lines 78-118javascript

78 for (const key of Object.keys(value).sort()) {

79 out[key] = canonicalize(value[key]);

80 }

81 return out;

82 }

83 return value;

84}

dist/terminal/shell-integration.jsView file

Lines 1-30javascript

1/**

2 * Shell integration — VS Code-style OSC 633 markers for the agent shell.

3 *

4 * The agent shell is a shared INTERACTIVE shell (the human can watch / take

5 * over). Injecting a `printf` sentinel as a command is fragile there (the line

6 * editor drops bytes, mangles echo). The robust answer — what VS Code / Roo /

7 * Windsurf do — is to have the shell emit structured markers from its own

8 * `preexec`/`precmd` hooks:

9 *

10 * ESC ] 633 ; C ; <nonce> BEL command start (pre-exec)

11 * ESC ] 633 ; D ; <nonce> ; <code> BEL command finished + exit code (precmd)

dist/gateway/auth/principal-middleware.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/gateway/auth/principal-middleware.jsView on unpkg