registry / @phnx-labs/agents-cli / 1.20.33

@phnx-labs/agents-cli@1.20.33

⚠ Under review

One CLI for all your AI coding agents - versions, config, cloud dispatch, sessions, and teams (now with first-class Grok Build CLI support)

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 317 file(s), 3.79 MB of source, external domains: 127.0.0.1, agentclientprotocol.com, ai.azure.com, anthropic.com, antigravity.google, api.anthropic.com, api.example.com, api.openai.com, api.prix.dev, app.factory.ai, aws.amazon.com, cloud.google.com, code.kimi.com, console.anthropic.com, console.x.ai, cursor.com, docs.openclaw.ai, docs.x.ai, example.com, generativelanguage.googleapis.com, git-scm.com, github.com, hermes-agent.nousresearch.com, linear.app, nodejs.org, opencode.ai, openrouter.ai, platform.claude.com, raw.githubusercontent.com, registry.modelcontextprotocol.io, registry.npmjs.org, unpkg.com, www.apple.com, www.npmjs.com, www.truefoundry.com, x.ai

Source & flagged code

9 flagged

package.jsonView file

Lines 30-70json

30 "scripts/install-helper.js",

31 "CHANGELOG.md",

32 "README.md",

33 "LICENSE"

34 ],

35 "publishConfig": {

36 "provenance": true

37 },

38 "repository": {

39 "type": "git",

40 "url": "git+https://github.com/phnx-labs/agents-cli.git"

41 },

42 "homepage": "https://agents-cli.sh",

43 "bugs": {

44 "url": "https://github.com/phnx-labs/agents-cli/issues"

45 },

46 "scripts": {

47 "build": "tsc && rm -rf 'dist/lib/secrets/AgentsKeychain.app' 'dist/lib/secrets/Agents CLI.app' 'dist/lib/menubar/MenubarHelper.app' && ([ \"$(uname)\" = \"Darwin\" ] && cp -R 'bin/Agents CLI.app' 'dist/lib/secrets/Agents CLI.app' || true) && ([ \"$(uname)\" = \"Darwin\" ] && [ -d 'bin/MenubarHelper.app' ] && mkdir -p 'dist/lib/menubar' && cp -R 'bin/MenubarHelper.app' 'dist/lib/menubar/MenubarHelper.app' || true)",

48 "build:bin": "scripts/build-bin.sh",

49 "prepack": "scripts/verify-keychain-helper.sh && scripts/verify-menubar-helper.sh",

50 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L50

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L50

51 "dev": "tsx src/index.ts",

52 "start": "node dist/index.js",

53 "test": "node ./node_modules/vitest/vitest.mjs run",

54 "test:remote": "scripts/sandbox.sh 'bun install && bun run build && bun run test'",

55 "test:watch": "node ./node_modules/vitest/vitest.mjs"

56 },

57 "keywords": [

58 "agents",

59 "cli",

60 "dotfiles",

61 "claude",

62 "codex",

63 "gemini",

64 "cursor",

65 "opencode",

66 "grok",

67 "xai",

68 "mcp",

69 "skills",

70 "ai",

dist/index.jsView file

Lines 330-370javascript

330async function promptUpgrade(latestVersion) {

331 const { default: ora } = await import('ora');

332 const { confirm, select } = await import('@inquirer/prompts'

dist/lib/exec.jsView file

Lines 464-504javascript

464 }

465 else if (options.agent === 'opencode' && cmd[1] === 'run') {

466 cmd.splice(1, 1);

467 }

468 }

469 // Native resume with a `{ subcommand }` shape (codex) appends the resume verb

dist/lib/platform/ipc.jsView file

Lines 1-22javascript

1/**

2 * Local-daemon IPC endpoint, platform-aware.

3 */

4import * as crypto from 'crypto';

5/**

6 * Resolve the address a local daemon listens on / clients connect to.

7 *

8 * POSIX: the AF_UNIX socket file path itself.

9 * Windows: a named pipe (`\\.\pipe\agents-<hash>`). Filesystem socket files

10 * aren't supported there, and named pipes are NOT filesystem objects — derive a

dist/lib/agents.jsView file

Lines 1-30javascript

1/**

2 * Core agent configuration and detection module.

3 *

4 * Defines the canonical registry of all supported AI coding agents (Claude, Codex,

5 * Gemini, Cursor, OpenCode, OpenClaw, Copilot, Amp, Kiro, Goose, Roo, Grok) with their

6 * CLI commands, config paths, capability flags, and MCP integration points.

7 *

8 * Provides functions for detecting installed CLIs, resolving version-managed binaries,

9 * reading account/auth info, and managing MCP server registrations across agents.

10 */

11import { execFile }

dist/lib/cli-resources.jsView file

Lines 336-376javascript

336 }

337 const key = `${process.platform}-${process.arch}`;

338 const spec = method.binary[key];

339 if (!spec)

340 return

dist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelperView file

•path = dist/lib/menubar/MenubarHelper.[redacted] kind = native_binary sizeBytes = 465968 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelperView on unpkg

dist/commands/secrets.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @phnx-labs/agents-cli@1.20.28 matchedIdentity = npm:QHBobngtbGFicy9hZ2VudHMtY2xp:1.20.28 similarity = 0.592 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/commands/secrets.jsView on unpkg

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

350if (answer === 'now') { L351: const { spawnSync } = await import('child_process'); L352: let spinner = ora('Resolving package metadata...').start();

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L350

dist/lib/exec.jsView file

484// (see createVersionedAlias); prefer it so spawn() can launch it (the bash L485: // script is not directly executable by cmd.exe). When no shim exists on disk L486: // we fall back to the bare versioned name, which spawnAgent() resolves via

High

Shell

Package source references shell execution.

dist/lib/exec.jsView on unpkg · L484

dist/lib/platform/ipc.jsView file

12* touching disk, and never probe the result with fs.existsSync (it always reports L13: * false). Both forms are accepted by net.createServer / net.createConnection. L14: */ L15: export function ipcEndpoint(socketPath, platform = process.platform) { L16: if (platform === 'win32') {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/lib/platform/ipc.jsView on unpkg · L12

dist/lib/agents.jsView file

10*/ L11: import { execFile } from 'child_process'; L12: import { promisify } from 'util'; ... L23: const execFileAsync = promisify(execFile); L24: const HOME = os.homedir(); L25: /** ... L38: try { L39: cliVersionCache = JSON.parse(fs.readFileSync(CLI_VERSION_CACHE_PATH, 'utf-8')); L40: } ... L70: export function findInPath(command) { L71: const pathEnv = process.env.PATH || ''; L72: const pathExt = process.platform === 'win32' ? (process.env.PATHEXT || '').split(';') : [''];

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/lib/agents.jsView on unpkg · L10

dist/lib/cli-resources.jsView file

356assertNpmPackage(method.npm); L357: const r = spawnSync('npm', ['install', '-g', method.npm], { stdio: 'inherit' }); L358: if (r.status !== 0) { L359: throw new Error(`npm install -g ${method.npm} exited with status ${r.status ?? 'unknown'}`); L360: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/lib/cli-resources.jsView on unpkg · L356

dist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelperView file

•path = dist/lib/menubar/MenubarHelper.[redacted] kind = native_binary sizeBytes = 465968 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelperView on unpkg

dist/commands/secrets.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/commands/secrets.jsView on unpkg

Findings

1 Critical4 High6 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/commands/secrets.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processdist/index.js

HighShelldist/lib/exec.js

HighRuntime Package Installdist/lib/cli-resources.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/lib/agents.js

MediumShips Native Binarydist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelper

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/lib/platform/ipc.js

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

package.jsonView file

Lines 30-70json

30 "scripts/install-helper.js",

31 "CHANGELOG.md",

32 "README.md",

33 "LICENSE"

34 ],

35 "publishConfig": {

36 "provenance": true

37 },

38 "repository": {

39 "type": "git",

40 "url": "git+https://github.com/phnx-labs/agents-cli.git"

41 },

42 "homepage": "https://agents-cli.sh",

43 "bugs": {

44 "url": "https://github.com/phnx-labs/agents-cli/issues"

45 },

46 "scripts": {

48 "build:bin": "scripts/build-bin.sh",

49 "prepack": "scripts/verify-keychain-helper.sh && scripts/verify-menubar-helper.sh",

50 "postinstall": "node scripts/postinstall.js",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L50

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L50

51 "dev": "tsx src/index.ts",

52 "start": "node dist/index.js",

53 "test": "node ./node_modules/vitest/vitest.mjs run",

54 "test:remote": "scripts/sandbox.sh 'bun install && bun run build && bun run test'",

55 "test:watch": "node ./node_modules/vitest/vitest.mjs"

56 },

57 "keywords": [

58 "agents",

59 "cli",

60 "dotfiles",

61 "claude",

62 "codex",

63 "gemini",

64 "cursor",

65 "opencode",

66 "grok",

67 "xai",

68 "mcp",

69 "skills",

70 "ai",

dist/index.jsView file

Lines 330-370javascript

330async function promptUpgrade(latestVersion) {

331 const { default: ora } = await import('ora');

332 const { confirm, select } = await import('@inquirer/prompts'

dist/lib/exec.jsView file

Lines 464-504javascript

464 }

465 else if (options.agent === 'opencode' && cmd[1] === 'run') {

466 cmd.splice(1, 1);

467 }

468 }

469 // Native resume with a `{ subcommand }` shape (codex) appends the resume verb

dist/lib/platform/ipc.jsView file

Lines 1-22javascript

1/**

2 * Local-daemon IPC endpoint, platform-aware.

3 */

4import * as crypto from 'crypto';

5/**

6 * Resolve the address a local daemon listens on / clients connect to.

7 *

8 * POSIX: the AF_UNIX socket file path itself.

9 * Windows: a named pipe (`\\.\pipe\agents-<hash>`). Filesystem socket files

10 * aren't supported there, and named pipes are NOT filesystem objects — derive a

dist/lib/agents.jsView file

Lines 1-30javascript

1/**

2 * Core agent configuration and detection module.

3 *

4 * Defines the canonical registry of all supported AI coding agents (Claude, Codex,

5 * Gemini, Cursor, OpenCode, OpenClaw, Copilot, Amp, Kiro, Goose, Roo, Grok) with their

6 * CLI commands, config paths, capability flags, and MCP integration points.

7 *

8 * Provides functions for detecting installed CLIs, resolving version-managed binaries,

9 * reading account/auth info, and managing MCP server registrations across agents.

10 */

11import { execFile }

dist/lib/cli-resources.jsView file

Lines 336-376javascript

336 }

337 const key = `${process.platform}-${process.arch}`;

338 const spec = method.binary[key];

339 if (!spec)

340 return

dist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelperView file

•path = dist/lib/menubar/MenubarHelper.[redacted] kind = native_binary sizeBytes = 465968 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

dist/lib/menubar/MenubarHelper.app/Contents/MacOS/MenubarHelperView on unpkg

dist/commands/secrets.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/commands/secrets.jsView on unpkg