registry / @sayknow-cli/coding-agent / 0.3.6

@sayknow-cli/coding-agent@0.3.6

Sayknow-CLI CLI with read, bash, edit, write tools and session management

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 18 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1,034 file(s), 11.7 MB of source, external domains: 127.0.0.1, addons.mozilla.org, api.anthropic.com, api.coingecko.com, api.crossref.org, api.discogs.com, api.exa.ai, api.example.com, api.github.com, api.kimi.com, api.layofflabs.com, api.minimax.io, api.minimaxi.com, api.npmjs.org, api.nuget.org, api.openai.com, api.opencorporates.com, api.osv.dev, api.parallel.ai, api.perplexity.ai, api.proxy.example, api.rawg.io, api.search.brave.com, api.semanticscholar.org, api.smithery.ai, api.snapcraft.io, api.stackexchange.com, api.synthetic.new, api.tavily.com, api.telegram.org, api.w3.org, api.x.ai, api.z.ai, api.zenmux.example, artifacthub.io, arxiv.org, aside.com, aside.example.invalid, aur.archlinux.org, auth.example.com, auth.kimi.com, auth.x.ai, bedrock-runtime.us-east-1.amazonaws.com, broker.tailnet, bun.sh, cdn.syndication.twimg.com, cdnjs.cloudflare.com, chatgpt.com, cheat.sh, choosealicense.com

Source & flagged code

9 flagged

src/tools/eval.tsView file

Lines 597-637typescript

597 code,

598 title: typeof cell.title === "string" ? cell.title : undefined,

599 });

600 }

601 return out;

602}

603

604/** Format a status event as a single line for display. */

605function formatStatusEvent(event: EvalStatusEvent, theme: Theme): string {

606 const { op, ...data } = event;

607

608 type AvailableIcon = "icon.file" | "icon.folder" | "icon.git" | "icon.package";

609 const opIcons: Record<string, AvailableIcon> = {

610 read: "icon.file",

611 write: "icon.file",

612 append: "icon.file",

613 cat: "icon.file",

614 touch: "icon.file",

615 ls: "icon.folder",

616 cd: "icon.folder",

617 pwd: "icon.folder",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L617

618 mkdir: "icon.folder",

619 tree: "icon.folder",

620 git_status: "icon.git",

621 git_diff: "icon.git",

622 git_log: "icon.git",

623 git_show: "icon.git",

624 git_branch: "icon.git",

625 git_file_at: "icon.git",

626 git_has_changes: "icon.git",

627 run: "icon.package",

628 sh: "icon.package",

629 env: "icon.package",

630 batch: "icon.package",

631 };

632

633 const iconKey = opIcons[op] ?? "icon.file";

634 const icon = theme.styledSymbol(iconKey, "muted");

635

636 const parts: string[] = [];

637

scripts/verify-insane-vendor.tsView file

Lines 1-34typescript

1#!/usr/bin/env bun

2/**

3 * Vendor verification for packages/coding-agent/vendor/insane-search.

4 *

5 * Asserts:

6 * 1. Forbidden upstream paths/patterns are absent (install hooks, star-baiting,

7 * update-notifier, transcript-language scanner, .claude-plugin).

8 * 2. MANIFEST.json exists and pins a full 40-char upstream commit SHA.

9 * 3. The vendored runtime files are present.

10 * 4. `npm pack --dry-run --json` includes the vendor tree (engine entrypoint,

11 * templates, LICENSE, manifest) in the published package.

src/utils/clipboard.tsView file

Lines 48-88typescript

48 }

49 }

50 }

52 // Also try native tools (best effort for local sessions)

53 try {

54 if (process.env.TERMUX_VERSION) {

55 try {

56 execSync("termux-clipboard-set", { input: text, timeout: 5000

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Generic Playwright mobile fetcher — real Chrome + device emulation.

4 *

5 * Usage:

6 * echo '{"url":"...", "device":"iPhone 13 Pro"}' | node playwright_mobile_chrome.js

7 *

8 * Device name must match playwright `devices[...]` keys (Pixel 7, iPhone 13 Pro,

9 * iPad Pro 11, etc.). When in doubt, omit `device` — default is iPhone 13 Pro.

10 *

11 * NO-SITE-NAME RULE: same as playwright_real_chrome.js — no hostname branches.

src/utils/shell-snapshot.tsView file

Lines 1-24typescript

1/**

2 * Shell environment snapshot for preserving user aliases, functions, and options.

3 *

4 * Creates a snapshot file that captures the user's shell environment from their

5 * .bashrc/.zshrc, which can be sourced before each command to provide a familiar

6 * shell experience.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

7 */

8import * as fs

src/internal-urls/docs-index.generated.tsView file

24"fs-scan-cache-architecture.md": "# Filesystem Scan Cache Architecture Contract\n\nThis document defines the current contract for the shared filesystem scan cache implemented in Ru... L25: "geobench.md": "# GEO benchmark for Sayknow-CLI\n\nThis repository includes a [`geobench`](https://github.com/NomaDamas/geobench) product spec for measuring LLM answer visibility: ... L26: "grok-build-provider-design.md": "# Grok Build provider design\n\n## Status\n\nProposal for maintainer design review. This document intentionally does not add a bundled provider im... ... L35: "native-ffi-optimization-policy.md": "# ADR: Native FFI Optimization Policy\n\n- Status: Accepted\n- Scope: `crates/pi-natives` algorithmic ports proposed for performance reasons\n... L36: "natives-addon-loader-runtime.md": "# Natives Addon Loader Runtime\n\nThis document covers the runtime loader shipped by `@sayknow-cli/natives`: how `native/index.js` decides which... L37: "natives-architecture.md": "# Natives Architecture\n\n`@sayknow-cli/natives` is now a two-layer package around a loader:\n\n1. **CommonJS loader/package entrypoint** resolves and l... L38: "natives-binding-contract.md": "# Natives Binding Contrac

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L24

src/stt/setup.tsView file

Lines 1-23typescript

1import { detectRecordingTools } from "./recorder";

2import { resolvePython } from "./transcriber";

4const isWindows = process.platform === "win32";

6export interface STTDependencyStatus {

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 9969 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

vendor/insane-search/engine/tests/test_u1.pyView file

•path = vendor/insane-search/engine/tests/test_u1.py kind = payload_in_excluded_dir sizeBytes = 8679 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

vendor/insane-search/engine/tests/test_u1.pyView on unpkg

Source & flagged code

9 flagged · loading source

src/tools/eval.tsView file

617patternName = generic_password severity = medium line = 617 matchedText = pwd: "...

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L617

scripts/verify-insane-vendor.tsView file

14*/ L15: import { execFileSync } from "node:child_process"; L16: import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";

High

Child Process

Package source references child process execution.

scripts/verify-insane-vendor.tsView on unpkg · L14

src/utils/clipboard.tsView file

68L69: // PowerShell one-liner that emits the clipboard image as base64-encoded PNG on L70: // stdout, or nothing when the clipboard does not hold image data. Used as the

High

Shell

Package source references shell execution.

src/utils/clipboard.tsView on unpkg · L68

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView file

13L14: const dns = require('dns').promises; L15: const net = require('net');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView on unpkg · L13

src/utils/shell-snapshot.tsView file

4* Creates a snapshot file that captures the user's shell environment from their L5: * .bashrc/.zshrc, which can be sourced before each command to provide a familiar L6: * shell experience. ... L26: function getShellConfigFile(shell: string): string { L27: const home = os.homedir(); L28: if (shell.includes("zsh")) return path.join(home, ".zshrc"); ... L52: typeset -f > /dev/null 2>&1 L53: # Get user function names - filter system/private ones L54: typeset +f 2>/dev/null | grep -vE '^(_|__)' | grep -vE '${commonToolsRegex}' | while read func; do ... L135: // Skip on Windows (no .bashrc in standard location) L136: if (process.platform === "win32") { L137: return null;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

src/internal-urls/docs-index.generated.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L24

src/stt/setup.tsView file

3L4: const isWindows = process.platform === "win32"; L5: ... L14: const recorderHint = isWindows L15: ? "PowerShell fallback available. For better quality: install SoX or FFmpeg." L16: : "Install SoX: sudo apt install sox, or FFmpeg: sudo apt install ffmpeg"; ... L18: const pythonCmd = resolvePython(); L19: const pythonHint = "Install Python 3.8+ from https://python.org"; L20: ... L23: const check = Bun.spawnSync([pythonCmd, "-c", "import whisper"], { L24: stdout: "pipe", L25: stderr: "pipe",

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

src/stt/setup.tsView on unpkg · L3

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 9969 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

vendor/insane-search/engine/tests/test_u1.pyView file

•path = vendor/insane-search/engine/tests/test_u1.py kind = payload_in_excluded_dir sizeBytes = 8679 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

vendor/insane-search/engine/tests/test_u1.pyView on unpkg

Findings

5 High7 Medium6 Low

HighChild Processscripts/verify-insane-vendor.ts

HighShellsrc/utils/clipboard.ts

HighSame File Env Network Executionsrc/internal-urls/docs-index.generated.ts

HighSandbox Evasion Gated Capabilitysrc/stt/setup.ts

HighPayload In Excluded Dirvendor/insane-search/engine/tests/test_u1.py

MediumSecret Patternsrc/tools/eval.ts

MediumDynamic Requirevendor/insane-search/engine/templates/playwright_mobile_chrome.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencesrc/utils/shell-snapshot.ts

MediumShips Build Helpervendor/insane-search/engine/phase0.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

9 flagged

src/tools/eval.tsView file

Lines 597-637typescript

597 code,

598 title: typeof cell.title === "string" ? cell.title : undefined,

599 });

600 }

601 return out;

602}

603

604/** Format a status event as a single line for display. */

605function formatStatusEvent(event: EvalStatusEvent, theme: Theme): string {

606 const { op, ...data } = event;

607

608 type AvailableIcon = "icon.file" | "icon.folder" | "icon.git" | "icon.package";

609 const opIcons: Record<string, AvailableIcon> = {

610 read: "icon.file",

611 write: "icon.file",

612 append: "icon.file",

613 cat: "icon.file",

614 touch: "icon.file",

615 ls: "icon.folder",

616 cd: "icon.folder",

617 pwd: "icon.folder",

Medium

Secret Pattern

Package contains a possible secret pattern.

src/tools/eval.tsView on unpkg · L617

618 mkdir: "icon.folder",

619 tree: "icon.folder",

620 git_status: "icon.git",

621 git_diff: "icon.git",

622 git_log: "icon.git",

623 git_show: "icon.git",

624 git_branch: "icon.git",

625 git_file_at: "icon.git",

626 git_has_changes: "icon.git",

627 run: "icon.package",

628 sh: "icon.package",

629 env: "icon.package",

630 batch: "icon.package",

631 };

632

633 const iconKey = opIcons[op] ?? "icon.file";

634 const icon = theme.styledSymbol(iconKey, "muted");

635

636 const parts: string[] = [];

637

scripts/verify-insane-vendor.tsView file

Lines 1-34typescript

1#!/usr/bin/env bun

2/**

3 * Vendor verification for packages/coding-agent/vendor/insane-search.

4 *

5 * Asserts:

6 * 1. Forbidden upstream paths/patterns are absent (install hooks, star-baiting,

7 * update-notifier, transcript-language scanner, .claude-plugin).

8 * 2. MANIFEST.json exists and pins a full 40-char upstream commit SHA.

9 * 3. The vendored runtime files are present.

10 * 4. `npm pack --dry-run --json` includes the vendor tree (engine entrypoint,

11 * templates, LICENSE, manifest) in the published package.

src/utils/clipboard.tsView file

Lines 48-88typescript

48 }

49 }

50 }

52 // Also try native tools (best effort for local sessions)

53 try {

54 if (process.env.TERMUX_VERSION) {

55 try {

56 execSync("termux-clipboard-set", { input: text, timeout: 5000

vendor/insane-search/engine/templates/playwright_mobile_chrome.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2/**

3 * Generic Playwright mobile fetcher — real Chrome + device emulation.

4 *

5 * Usage:

6 * echo '{"url":"...", "device":"iPhone 13 Pro"}' | node playwright_mobile_chrome.js

7 *

8 * Device name must match playwright `devices[...]` keys (Pixel 7, iPhone 13 Pro,

9 * iPad Pro 11, etc.). When in doubt, omit `device` — default is iPhone 13 Pro.

10 *

11 * NO-SITE-NAME RULE: same as playwright_real_chrome.js — no hostname branches.

src/utils/shell-snapshot.tsView file

Lines 1-24typescript

1/**

2 * Shell environment snapshot for preserving user aliases, functions, and options.

3 *

4 * Creates a snapshot file that captures the user's shell environment from their

5 * .bashrc/.zshrc, which can be sourced before each command to provide a familiar

6 * shell experience.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/utils/shell-snapshot.tsView on unpkg · L4

7 */

8import * as fs

src/internal-urls/docs-index.generated.tsView file

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

src/internal-urls/docs-index.generated.tsView on unpkg · L24

src/stt/setup.tsView file

Lines 1-23typescript

1import { detectRecordingTools } from "./recorder";

2import { resolvePython } from "./transcriber";

4const isWindows = process.platform === "win32";

6export interface STTDependencyStatus {

vendor/insane-search/engine/phase0.pyView file

•path = vendor/insane-search/engine/phase0.py kind = build_helper sizeBytes = 9969 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

vendor/insane-search/engine/phase0.pyView on unpkg

vendor/insane-search/engine/tests/test_u1.pyView file

•path = vendor/insane-search/engine/tests/test_u1.py kind = payload_in_excluded_dir sizeBytes = 8679 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

vendor/insane-search/engine/tests/test_u1.pyView on unpkg