registry / @polderlabs/bizar / 6.3.0

@polderlabs/bizar@6.3.0

Norse-pantheon multi-agent system for Claude Code — 14 agents across 4 cost tiers with cost-aware routing, plans, and a configurable agent harness. Ships as a single npm package with the dashboard server, Claude Code MCP server, and typed SDK.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `bizar install`/`install.sh`, configures a provider, or starts a dashboard background agent.

Impact

Can modify the user's Claude/Cline configuration and execute Claude Code jobs with that user's local permissions.

Mechanism

User-invoked AI-agent configuration sync and local Claude CLI spawning.

Rationale

Source inspection confirms explicit-user agent configuration mutation and local process spawning, but not concrete malicious behavior. Treat as a warning for dangerous AI-agent control capability rather than a publish-blocking malware verdict.

Evidence

package.jsoncli/provision.mjscli/commands/setup-provider.mjsinstall.shbizar-dash/src/server/claude-bg-spawner.mjsconfig/skills/embedded-esp-idf/scripts/size_check.shcli/provision-claude.mjs~/.claude/settings.json~/.cline/data/settings/providers.json~/.cache/bizar/bg/

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`cli/provision.mjs` writes and syncs `~/.claude` configuration, agents, skills, hooks, and `settings.json`.
`install.sh` invokes the provisioner after an explicit installer execution.
`cli/commands/setup-provider.mjs` explicitly updates a Cline provider configuration.
`bizar-dash/src/server/claude-bg-spawner.mjs` spawns the user-selected `claude` CLI for dashboard background jobs.

Evidence against

`package.json` has no `preinstall`, `install`, or `postinstall` lifecycle hook; only `prepublishOnly`.
No inspected source showed credential harvesting, secret exfiltration, remote payload download, or covert network endpoint.
The flagged shell scripts in `config/skills/embedded-esp-idf/scripts/` are ordinary user-invoked ESP-IDF helpers.
README scanner/reviewer terms are prompt-injection detection examples, not instructions to the reviewer.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

Manifest

WildcardDependency

scanned 545 file(s), 5.55 MB of source, external domains: 127.0.0.1, ai.google.dev, api.anthropic.com, api.cloudflare.com, api.cohere.ai, api.cohere.com, api.deepseek.com, api.groq.com, api.minimax.chat, api.minimax.io, api.mistral.ai, api.openai.com, api.vercel.com, astral.sh, bun.sh, console.groq.com, dash.cloudflare.com, deb.nodesource.com, docs.anthropic.com, docs.astral.sh, docs.cline.bot, docs.cohere.com, docs.mistral.ai, example.com, fly.io, generativelanguage.googleapis.com, github.com, gitlab.com, json.schemastore.org, lmstudio.ai, nodejs.org, ollama.com, openrouter.ai, platform.deepseek.com, platform.minimax.io, platform.openai.com, raw.githubusercontent.com, reactjs.org, tailscale.com, www.apple.com, www.minimax.io, www.w3.org

Source & flagged code

28 flagged

README.mdView file

•| **Prompt injection** | `ignore previous instructions`, `reveal your system prompt` |

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

bizar-dash/tests/memory-sync.test.mjsView file

Lines 1-32javascript

1/**

2 * tests/memory-sync.test.mjs

3 *

4 * Integration tests for the memory sync orchestrator (C6).

5 * Tests: clean sync commits, secret-blocked sync is rejected, F6 commit message.

6 */

8import { describe, it, beforeEach, afterEach } from 'node:test';

9import assert from 'node:assert';

10import { tmpdir } from 'node:os';

11import { join } from 'node:path';

12import { mkdirSync, rmSync, writeFileSync, existsSync, readFileSync } from 'node:fs';

13import { execSync } from 'node:child_process';

High

Child Process

Package source references child process execution.

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L12

15const TEST_GIT = await import('../src/server/memory-git.mjs').then((m) => m);

16const TEST_STORE = await import('../src/server/memory-store.mjs').then((m) => m);

17const GIT_INSTALLED = TEST_GIT.isGitInstalled();

19describe('memory-sync', () => {

20 let bareRemote;

21 let workingDir;

22 let projectRoot;

24 beforeEach(() => {

25 bareRemote = null;

26 workingDir = null;

27 projectRoot = null;

28 if (!GIT_INSTALLED) return;

30 // Set up a bare remote + working clone

31 bareRemote = join(tmpdir(), `sync-remote-${Date.now()}.git`);

32 mkdirSync(bareRemote, { recursive: true });

Lines 87-127javascript

87 TEST_GIT.addAll(workingDir);

88 const result = TEST_GIT.commit(workingDir, '[memory-sync] 2026-01-01 test sync');

89 assert.strictEqual(result.ok, true);

90 });

92 (GIT_INSTALLED ? it : it.skip)('note with HIGH-severity secret is blocked', () =>

107patternName = aws_access_key severity = critical line = 107 matchedText = body: 'A...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-sync.test.mjs

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L107

bizar-dash/src/server/browser.mjsView file

Lines 1-38javascript

1/**

2 * cli/dashboard/browser.mjs

3 *

4 * Cross-platform best-effort browser launcher. On failure (no graphical

5 * session, headless server), we just log the URL so the user can open it

6 * manually.

7 */

8import { spawn } from 'node:child_process';

10export async function

templates/plan/htmx.min.jsView file

Lines 1-1javascript

1var htmx=function(){"use strict";const Q={onLoad:null,process:null,on:null,off:null,trigger:null,ajax:null,find:null,findAll:null,closest:null,values:function(e,t){const n

bizar-dash/tests/minimax-models.test.mjsView file

Lines 1-39javascript

1/**

2 * minimax-models.test.mjs — verify MiniMax is the default/primary provider

3 * and that the catalog, constants, and agent configs all agree.

4 *

5 * Run with: node --test tests/minimax-models.test.mjs

6 */

7import { describe, it, before } from 'node:test';

8import assert from 'node:assert/strict';

9import { resolve, join }

bizar-dash/src/server/routes/activity.mjsView file

Lines 6-46javascript

6 * /api/activity/hidden — list of hidden event keys (for overview hide)

7 * /api/activity/hide — POST { keys: [...] } add to hidden

8 * /api/activity

cli/service-controller.mjsView file

Lines 3-43javascript

3 * cli/service-controller.mjs

4 *

5 * v4.4.0 — Platform-aware install/uninstall for the Bizar background service.

6 *

7 * Registers the existing `bizar service _daemon` daemon under the OS-level

8 *

bizar-dash/src/server/schedules-runner.mjsView file

Lines 1-38javascript

1/**

2 * src/server/schedules-runner.mjs

3 *

4 * v3.9.0 — Executes due schedules.

5 *

6 * Called by the service daemon (cli/service.mjs) on a tick. For each due

7 * schedule, this module runs the action and records the result via

8 * schedulesStore.recordRun().

9 *

10 * Action types:

11 * - command → spawn a child process

12 * - agent → submit via taskDelegator (Odin split-and-dispatch).

cli/copy.mjsView file

80L81: const skillsDir = join(homedir(), '.cline', 'skills'); L82: const dstDir = join(skillsDir, name); ... L124: let templateObj; L125: try { templateObj = JSON.parse(templateRaw); } catch { L126: spinner.fail(chalk.red('Invalid cline.json template')); ... L344: export async function installHeadroom() { L345: const { execSync } = await import('node:child_process'); L346: ... L360: L361: if (process.platform === 'win32') { L362: spinner.fail(chalk.red('Automatic Headroom install not supported on Windows. Install manually: pip install "headroom-ai[all]"'));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/copy.mjsView on unpkg · L80

bizar-dash/src/server/update-store.mjsView file

77try { L78: const output = execSync( L79: `npm install -g ${p.name}@latest --ignore-scripts`, L80: {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bizar-dash/src/server/update-store.mjsView on unpkg · L77

config/skills/embedded-esp-idf/scripts/size_check.shView file

•path = config/skills/embedded-esp-idf/scripts/size_check.sh kind = build_helper sizeBytes = 2452 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

config/skills/embedded-esp-idf/scripts/size_check.shView on unpkg

.claude/skills/embedded-esp-idf/scripts/size_check.shView file

•path = .claude/skills/embedded-esp-idf/scripts/size_check.sh kind = payload_in_excluded_dir sizeBytes = 2452 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/embedded-esp-idf/scripts/size_check.shView on unpkg

package.jsonView file

•scripts changed=test:sdk,test:sdk:watch

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

bizar-dash/src/server/claude-bg-spawner.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @polderlabs/bizar@6.2.4 matchedIdentity = npm:QHBvbGRlcmxhYnMvYml6YXI:6.2.4 similarity = 0.950 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bizar-dash/src/server/claude-bg-spawner.mjsView on unpkg

bizar-dash/tests/memory-secrets.test.mjsView file

19patternName = aws_access_key severity = critical line = 19 matchedText = const re...E');

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L19

25patternName = github_pat severity = critical line = 25 matchedText = const re...D');

Critical

Secret Pattern

GitHub personal access token in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L25

31patternName = stripe_live_secret severity = critical line = 31 matchedText = const re...p');

Critical

Secret Pattern

Stripe live secret key in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L31

37patternName = slack_bot_token severity = critical line = 37 matchedText = const re...x');

Critical

Secret Pattern

bizar-dash/tests/memory-store.test.mjsView file

223patternName = aws_access_key severity = critical line = 223 matchedText = body: 'A...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-store.test.mjs

bizar-dash/tests/memory-store.test.mjsView on unpkg · L223

bizar-dash/tests/memory-cli.test.mjsView file

231patternName = aws_access_key severity = critical line = 231 matchedText = '--body'...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-cli.test.mjs

bizar-dash/tests/memory-cli.test.mjsView on unpkg · L231

bizar-dash/scripts/smoke-bg-retry.mjsView file

45patternName = generic_password severity = medium line = 45 matchedText = const in...' };

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L45

53patternName = generic_password severity = medium line = 53 matchedText = const in...' };

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L53

65patternName = generic_password severity = medium line = 65 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L65

Source & flagged code

28 flagged · loading source

README.mdView file

•| **Prompt injection** | `ignore previous instructions`, `reveal your system prompt` |

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

bizar-dash/tests/memory-sync.test.mjsView file

107patternName = aws_access_key severity = critical line = 107 matchedText = body: 'A...ey',

Critical

Critical Secret

Package contains a critical-looking secret pattern.

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L107

107patternName = aws_access_key severity = critical line = 107 matchedText = body: 'A...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-sync.test.mjs

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L107

12import { mkdirSync, rmSync, writeFileSync, existsSync, readFileSync } from 'node:fs'; L13: import { execSync } from 'node:child_process'; L14:

High

Child Process

Package source references child process execution.

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L12

bizar-dash/src/server/browser.mjsView file

18} else if (platform === 'win32') { L19: // Windows `start` is a shell builtin; spawn it via cmd.exe. L20: cmd = 'cmd';

High

Shell

Package source references shell execution.

bizar-dash/src/server/browser.mjsView on unpkg · L18

templates/plan/htmx.min.jsView file

1var htmx=function(){"use strict";const Q={onLoad:null,process:null,on:null,off:null,trigger:null,ajax:null,find:null,findAll:null,closest:null,values:function(e,t){const n=cn(e,t||...

Low

Eval

Package source references a known benign dynamic code generation pattern.

templates/plan/htmx.min.jsView on unpkg · L1

bizar-dash/tests/minimax-models.test.mjsView file

19const cacheBust = '?cb=' + Date.now() + '-' + Math.random().toString(36).slice(2); L20: mod = await import(join(REPO, 'bizar-dash/src/server/providers-store.mjs') + cacheBust); L21: AGENTS_DIR = join(REPO, 'config', 'agents');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bizar-dash/tests/minimax-models.test.mjsView on unpkg · L19

bizar-dash/src/server/routes/activity.mjsView file

26L27: const HIDDEN_PATH = join(homedir(), '.cache', 'bizar', 'activity-hidden.json'); L28: ... L31: try { L32: return JSON.parse(readFileSync(HIDDEN_PATH, 'utf8')); L33: } catch { ... L81: // POST /activity/hide — add keys to hidden list L82: router.post('/activity/hide', wrap(async (req, res) => { L83: const keys = Array.isArray(req.body?.keys) ? req.body.keys : [];

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bizar-dash/src/server/routes/activity.mjsView on unpkg · L26

cli/service-controller.mjsView file

23* secrets come from a 0600 env file (`~/.config/bizar/service.env`). L24: * * All process spawning uses `spawnSync(command, args, {shell: false})` L25: * with explicit arg arrays. There is no string concatenation into a ... L45: const __filename = fileURLToPath(import.meta.url); L46: const __dirname = dirname(__filename); L47: const HOME = homedir(); ... L53: if (PLATFORM === 'win32') return null; L54: return process.env.XDG_CONFIG_HOME L55: ? join(process.env.XDG_CONFIG_HOME, 'systemd', 'user') ... L69: * Run an external command with explicit arg array. No shell. Strict 15s budget. L70: * Returns {status, stdout, stderr, error} where `status` is the exit code L71: * (or null on spawn failure) and `error` is a non-null Error object only when

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

cli/service-controller.mjsView on unpkg · L23

bizar-dash/src/server/schedules-runner.mjsView file

18*/ L19: import { spawn } from 'node:child_process'; L20: import { writeFileSync, appendFileSync, mkdirSync } from 'node:fs'; ... L22: import { homedir } from 'node:os'; L23: import { isIP } from 'node:net'; L24: import { projectsStore } from './projects-store.mjs'; ... L30: const LOG_FILE = join(LOG_DIR, 'service.log'); L31: const ALLOW_PRIVATE_WEBHOOKS = process.env.BIZAR_DASHBOARD_ALLOW_PRIVATE_WEBHOOKS === '1'; L32: const SHELL_META = /[;&|`$<>\n\r]/;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bizar-dash/src/server/schedules-runner.mjsView on unpkg · L18

cli/copy.mjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/copy.mjsView on unpkg · L80

bizar-dash/src/server/update-store.mjsView file

77try { L78: const output = execSync( L79: `npm install -g ${p.name}@latest --ignore-scripts`, L80: {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bizar-dash/src/server/update-store.mjsView on unpkg · L77

config/skills/embedded-esp-idf/scripts/size_check.shView file

•path = config/skills/embedded-esp-idf/scripts/size_check.sh kind = build_helper sizeBytes = 2452 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

config/skills/embedded-esp-idf/scripts/size_check.shView on unpkg

.claude/skills/embedded-esp-idf/scripts/size_check.shView file

•path = .claude/skills/embedded-esp-idf/scripts/size_check.sh kind = payload_in_excluded_dir sizeBytes = 2452 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/embedded-esp-idf/scripts/size_check.shView on unpkg

package.jsonView file

•scripts changed=test:sdk,test:sdk:watch

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

bizar-dash/src/server/claude-bg-spawner.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bizar-dash/src/server/claude-bg-spawner.mjsView on unpkg

bizar-dash/tests/memory-secrets.test.mjsView file

19patternName = aws_access_key severity = critical line = 19 matchedText = const re...E');

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L19

25patternName = github_pat severity = critical line = 25 matchedText = const re...D');

Critical

Secret Pattern

GitHub personal access token in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L25

31patternName = stripe_live_secret severity = critical line = 31 matchedText = const re...p');

Critical

Secret Pattern

Stripe live secret key in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L31

37patternName = slack_bot_token severity = critical line = 37 matchedText = const re...x');

Critical

Secret Pattern

Slack bot token in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L37

43patternName = private_key_rsa severity = critical line = 43 matchedText = const re...-');

Critical

Secret Pattern

RSA private key in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L43

92patternName = aws_access_key severity = critical line = 92 matchedText = const te...ee';

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L92

99patternName = aws_access_key severity = critical line = 99 matchedText = const re...E');

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L99

bizar-dash/tests/memory-store.test.mjsView file

223patternName = aws_access_key severity = critical line = 223 matchedText = body: 'A...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-store.test.mjs

bizar-dash/tests/memory-store.test.mjsView on unpkg · L223

bizar-dash/tests/memory-cli.test.mjsView file

231patternName = aws_access_key severity = critical line = 231 matchedText = '--body'...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-cli.test.mjs

bizar-dash/tests/memory-cli.test.mjsView on unpkg · L231

bizar-dash/scripts/smoke-bg-retry.mjsView file

45patternName = generic_password severity = medium line = 45 matchedText = const in...' };

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L45

53patternName = generic_password severity = medium line = 53 matchedText = const in...' };

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L53

65patternName = generic_password severity = medium line = 65 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L65

Findings

13 Critical7 High10 Medium8 Low

CriticalCritical Secretbizar-dash/tests/memory-sync.test.mjs

CriticalManifest Confusionpackage.json

CriticalPrevious Version Dangerous Deltabizar-dash/src/server/claude-bg-spawner.mjs

CriticalSecret Patternbizar-dash/tests/memory-sync.test.mjs

CriticalSecret Patternbizar-dash/tests/memory-secrets.test.mjs

CriticalSecret Patternbizar-dash/tests/memory-store.test.mjs

CriticalSecret Patternbizar-dash/tests/memory-cli.test.mjs

HighAi Reviewer ManipulationREADME.md

HighChild Processbizar-dash/tests/memory-sync.test.mjs

HighShellbizar-dash/src/server/browser.mjs

HighSame File Env Network Executionbizar-dash/src/server/schedules-runner.mjs

HighSandbox Evasion Gated Capabilitycli/copy.mjs

HighRuntime Package Installbizar-dash/src/server/update-store.mjs

HighPayload In Excluded Dir.claude/skills/embedded-esp-idf/scripts/size_check.sh

MediumDynamic Requirebizar-dash/tests/minimax-models.test.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencecli/service-controller.mjs

MediumShips Build Helperconfig/skills/embedded-esp-idf/scripts/size_check.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

MediumSecret Patternbizar-dash/scripts/smoke-bg-retry.mjs

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaltemplates/plan/htmx.min.js

LowWeak Cryptobizar-dash/src/server/routes/activity.mjs

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

28 flagged

README.mdView file

•| **Prompt injection** | `ignore previous instructions`, `reveal your system prompt` |

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

bizar-dash/tests/memory-sync.test.mjsView file

Lines 1-32javascript

1/**

2 * tests/memory-sync.test.mjs

3 *

4 * Integration tests for the memory sync orchestrator (C6).

5 * Tests: clean sync commits, secret-blocked sync is rejected, F6 commit message.

6 */

8import { describe, it, beforeEach, afterEach } from 'node:test';

9import assert from 'node:assert';

10import { tmpdir } from 'node:os';

11import { join } from 'node:path';

12import { mkdirSync, rmSync, writeFileSync, existsSync, readFileSync } from 'node:fs';

13import { execSync } from 'node:child_process';

High

Child Process

Package source references child process execution.

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L12

15const TEST_GIT = await import('../src/server/memory-git.mjs').then((m) => m);

16const TEST_STORE = await import('../src/server/memory-store.mjs').then((m) => m);

17const GIT_INSTALLED = TEST_GIT.isGitInstalled();

19describe('memory-sync', () => {

20 let bareRemote;

21 let workingDir;

22 let projectRoot;

24 beforeEach(() => {

25 bareRemote = null;

26 workingDir = null;

27 projectRoot = null;

28 if (!GIT_INSTALLED) return;

30 // Set up a bare remote + working clone

31 bareRemote = join(tmpdir(), `sync-remote-${Date.now()}.git`);

32 mkdirSync(bareRemote, { recursive: true });

Lines 87-127javascript

87 TEST_GIT.addAll(workingDir);

88 const result = TEST_GIT.commit(workingDir, '[memory-sync] 2026-01-01 test sync');

89 assert.strictEqual(result.ok, true);

90 });

92 (GIT_INSTALLED ? it : it.skip)('note with HIGH-severity secret is blocked', () =>

107patternName = aws_access_key severity = critical line = 107 matchedText = body: 'A...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-sync.test.mjs

bizar-dash/tests/memory-sync.test.mjsView on unpkg · L107

bizar-dash/src/server/browser.mjsView file

Lines 1-38javascript

1/**

2 * cli/dashboard/browser.mjs

3 *

4 * Cross-platform best-effort browser launcher. On failure (no graphical

5 * session, headless server), we just log the URL so the user can open it

6 * manually.

7 */

8import { spawn } from 'node:child_process';

10export async function

templates/plan/htmx.min.jsView file

Lines 1-1javascript

1var htmx=function(){"use strict";const Q={onLoad:null,process:null,on:null,off:null,trigger:null,ajax:null,find:null,findAll:null,closest:null,values:function(e,t){const n

bizar-dash/tests/minimax-models.test.mjsView file

Lines 1-39javascript

1/**

2 * minimax-models.test.mjs — verify MiniMax is the default/primary provider

3 * and that the catalog, constants, and agent configs all agree.

4 *

5 * Run with: node --test tests/minimax-models.test.mjs

6 */

7import { describe, it, before } from 'node:test';

8import assert from 'node:assert/strict';

9import { resolve, join }

bizar-dash/src/server/routes/activity.mjsView file

Lines 6-46javascript

6 * /api/activity/hidden — list of hidden event keys (for overview hide)

7 * /api/activity/hide — POST { keys: [...] } add to hidden

8 * /api/activity

cli/service-controller.mjsView file

Lines 3-43javascript

3 * cli/service-controller.mjs

4 *

5 * v4.4.0 — Platform-aware install/uninstall for the Bizar background service.

6 *

7 * Registers the existing `bizar service _daemon` daemon under the OS-level

8 *

bizar-dash/src/server/schedules-runner.mjsView file

Lines 1-38javascript

1/**

2 * src/server/schedules-runner.mjs

3 *

4 * v3.9.0 — Executes due schedules.

5 *

6 * Called by the service daemon (cli/service.mjs) on a tick. For each due

7 * schedule, this module runs the action and records the result via

8 * schedulesStore.recordRun().

9 *

10 * Action types:

11 * - command → spawn a child process

12 * - agent → submit via taskDelegator (Odin split-and-dispatch).

cli/copy.mjsView file

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

cli/copy.mjsView on unpkg · L80

bizar-dash/src/server/update-store.mjsView file

77try { L78: const output = execSync( L79: `npm install -g ${p.name}@latest --ignore-scripts`, L80: {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bizar-dash/src/server/update-store.mjsView on unpkg · L77

config/skills/embedded-esp-idf/scripts/size_check.shView file

•path = config/skills/embedded-esp-idf/scripts/size_check.sh kind = build_helper sizeBytes = 2452 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

config/skills/embedded-esp-idf/scripts/size_check.shView on unpkg

.claude/skills/embedded-esp-idf/scripts/size_check.shView file

•path = .claude/skills/embedded-esp-idf/scripts/size_check.sh kind = payload_in_excluded_dir sizeBytes = 2452 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

.claude/skills/embedded-esp-idf/scripts/size_check.shView on unpkg

package.jsonView file

•scripts changed=test:sdk,test:sdk:watch

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

bizar-dash/src/server/claude-bg-spawner.mjsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bizar-dash/src/server/claude-bg-spawner.mjsView on unpkg

bizar-dash/tests/memory-secrets.test.mjsView file

19patternName = aws_access_key severity = critical line = 19 matchedText = const re...E');

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L19

25patternName = github_pat severity = critical line = 25 matchedText = const re...D');

Critical

Secret Pattern

GitHub personal access token in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L25

31patternName = stripe_live_secret severity = critical line = 31 matchedText = const re...p');

Critical

Secret Pattern

Stripe live secret key in bizar-dash/tests/memory-secrets.test.mjs

bizar-dash/tests/memory-secrets.test.mjsView on unpkg · L31

37patternName = slack_bot_token severity = critical line = 37 matchedText = const re...x');

Critical

Secret Pattern

bizar-dash/tests/memory-store.test.mjsView file

223patternName = aws_access_key severity = critical line = 223 matchedText = body: 'A...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-store.test.mjs

bizar-dash/tests/memory-store.test.mjsView on unpkg · L223

bizar-dash/tests/memory-cli.test.mjsView file

231patternName = aws_access_key severity = critical line = 231 matchedText = '--body'...ey',

Critical

Secret Pattern

AWS access key ID in bizar-dash/tests/memory-cli.test.mjs

bizar-dash/tests/memory-cli.test.mjsView on unpkg · L231

bizar-dash/scripts/smoke-bg-retry.mjsView file

45patternName = generic_password severity = medium line = 45 matchedText = const in...' };

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L45

53patternName = generic_password severity = medium line = 53 matchedText = const in...' };

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L53

65patternName = generic_password severity = medium line = 65 matchedText = password...st',

Medium

Secret Pattern

Hardcoded password in bizar-dash/scripts/smoke-bg-retry.mjs

bizar-dash/scripts/smoke-bg-retry.mjsView on unpkg · L65