registry / @sdsrs/agentsmd / 2.10.0

@sdsrs/agentsmd@2.10.0

A global coding-discipline spec for Codex, enforced by native Codex hooks + a rule-hit telemetry closed loop. Independent of oh-my-codex.

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 23 file(s), 226 KB of source, external domains: github.com

Source & flagged code

6 flagged

hooks/tests/smoke.shView file

Lines 242-282shell

242echo "== memory-prompt-hint.sh =="

243printf '%s\n' '- [auth-flow](memory/auth.md) — authentication and login handling' > "$PROJ/MEMORY.md"

244mk_ph() { jq -cn --arg p "$1" --arg cwd "$2" '{prompt:$p,cwd:$cwd,session_id:"smoke1",hook_event_name:"UserPromptSubmit"}'; }

245OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'fix the authentication bug' "$PROJ")")"; is_context "$OUT" && ok "prompt matches MEMORY index → hint" || bad "prompt matches MEMORY index → hint" "$OUT"

246OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'bump the version number' "$PROJ")")"; is_empty "$OUT" && ok "prompt no match → silent" || bad "prompt no match → silent" "$OUT"

247OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'fix the authentication bug' "$SANDBOX/noproj")")"; is_empty "$OUT" && ok "no MEMORY.md → silent" || bad "no MEMORY.md → silent" "$OUT"

248OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'fix billing invoice bug' "$NONGIT/child")")"; is_context "$OUT" && ok "prompt matches parent MEMORY outside git → hint" || bad "prompt matches parent MEMORY outside git → hint" "$OUT"

249# C4: 中文 index trigger words match a 中文 prompt (UTF-8 locale; on LC_ALL=C the

250# CJK class won't match and the hint fails safe rather than firing wrongly).

251printf '%s\n' '- [认证登录](memory/auth.md) — 认证登录会话处理' > "$PROJ/MEMORY.md"

252OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph '修复认证登录的并发问题' "$PROJ")")"; is_context "$OUT" && ok "中文 prompt matches 中文 index → hint" || bad "中文 prompt matches 中文 index → hint" "$OUT"

253OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph '更新版本号' "$PROJ")")"; is_empty "$OUT" && ok "中文 prompt no match → silent" || bad "中文 prompt no match → silent" "$OUT"

254

255echo "== secrets-scan.sh =="

256if command -v git >/dev/null 2>&1; then

257 SECREPO="$SANDBOX/secrepo"; mkdir -p "$SECREPO"

258 git -C "$SECREPO" init -q >/dev/null 2>&1

259 mk_sec() { jq -cn --arg c "$1" --arg cwd "$2" '{tool_name:"Bash",tool_input:{command:$c},session_id:"smokesecrets",cwd:$cwd}'; }

260 printf 'const x = 1;\n' > "$SECREPO/app.js"; git -C "$SECREPO" add app.js >/dev/null 2>&1

261 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git commit -m clean' "$SECREPO")")"; is_empty "$OUT" && ok "commit clean staged diff → allow" || bad "commit clean staged diff → allow" "$OUT"

262 printf 'aws = "AKIAIOSFODNN7EXAMPLE"\n' >> "$SECREPO/app.js"; git -C "$SECREPO" add app.js >/dev/null 2>&1

Critical

Critical Secret

Package contains a critical-looking secret pattern.

hooks/tests/smoke.shView on unpkg · L262

Critical

Secret Pattern

AWS access key ID in hooks/tests/smoke.sh

hooks/tests/smoke.shView on unpkg · L262

263 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git commit -m addkey' "$SECREPO")")"; is_block "$OUT" && ok "commit staging an AWS-key-shaped secret → block" || bad "commit staging AWS key → block" "$OUT"

264 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git commit -m addkey [allow-secret]' "$SECREPO")")"; is_empty "$OUT" && ok "commit secret + [allow-secret] bypass → allow" || bad "commit secret + bypass → allow" "$OUT"

265 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git status' "$SECREPO")")"; is_empty "$OUT" && ok "non-commit git command → allow" || bad "non-commit git → allow" "$OUT"

266else

267 ok "secrets-scan.sh skipped (git not on PATH)"

268fi

269

270echo "== telemetry =="

271LOG="$SANDBOX/.codex/logs/agentsmd.jsonl"

272if [[ -r "$LOG" ]]; then

273 ROWS="$(wc -l < "$LOG" | tr -d ' ')"

274 SECTIONS="$(jq -r '.spec_section // "null"' "$LOG" 2>/dev/null | sort -u | paste -sd, -)"

275 ok "telemetry rows written: $ROWS (sections: $SECTIONS)"

276else

277 bad "telemetry log written" "(no $LOG)"

278fi

279# AGENTSMD_TELEMETRY_TAG stamps a `tag` field so verify/sandbox runs are excludable by audit.

280TAGHOME="$SANDBOX/tagtest"; mkdir -p "$TAGHOME/logs"

281CODEX_HOME="$TAGHOME" AGENTSMD_TELEMETRY_TAG=test bash -c 'source hooks/lib/rule-hits.sh; rule_hits_append "h" "block" "null" "§8-rm-rf-var" "sid-abcdefgh"'

282if [[ -r "$TAGHOME/logs/agentsmd.jsonl" ]] && jq -e '.tag=="test"' "$TAGHOME/logs/agentsmd.jsonl" >/dev/null 2>&1; then

•path = hooks/tests/smoke.sh kind = payload_in_excluded_dir sizeBytes = 28794 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

hooks/tests/smoke.shView on unpkg

bin/agentsmd.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2'use strict';

3// agentsmd CLI — a thin dispatcher over the L2 scripts in ../scripts. Each script

4// is an independently runnable Node program that reads process.argv and owns its

5// own output + exit code, so we SPAWN it as a child (never require it): its arg

6// parsing, JSON output, and exit status pass through byte-for-byte, and the L1/L2

7// isolation invariant (ARCHITECTURE.md §2 — this CLI adds no logic) stays intact.

8// Reached as `npx @sdsrs/agentsmd <cmd>` or, after a global install, `agentsmd <cmd>`.

10const path =

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6889 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

scripts/tests/install.test.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sdsrs/agentsmd@2.8.0 matchedIdentity = npm:QHNkc3JzL2FnZW50c21k:2.8.0 similarity = 0.455 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/tests/install.test.jsView on unpkg

Source & flagged code

6 flagged · loading source

hooks/tests/smoke.shView file

262patternName = aws_access_key severity = critical line = 262 matchedText = printf '...2>&1

Critical

Critical Secret

Package contains a critical-looking secret pattern.

hooks/tests/smoke.shView on unpkg · L262

262patternName = aws_access_key severity = critical line = 262 matchedText = printf '...2>&1

Critical

Secret Pattern

AWS access key ID in hooks/tests/smoke.sh

hooks/tests/smoke.shView on unpkg · L262

•path = hooks/tests/smoke.sh kind = payload_in_excluded_dir sizeBytes = 28794 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

hooks/tests/smoke.shView on unpkg

bin/agentsmd.jsView file

9L10: const path = require('path'); L11: const cp = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/agentsmd.jsView on unpkg · L9

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6889 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

scripts/tests/install.test.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/tests/install.test.jsView on unpkg

Findings

2 Critical2 High4 Medium4 Low

CriticalCritical Secrethooks/tests/smoke.sh

CriticalSecret Patternhooks/tests/smoke.sh

HighPayload In Excluded Dirhooks/tests/smoke.sh

HighPrevious Version Dangerous Deltascripts/tests/install.test.js

MediumDynamic Requirebin/agentsmd.js

MediumEnvironment Vars

MediumShips Build Helperinstall.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings