registry / @sdsrs/agentsmd / 2.13.0

@sdsrs/agentsmd@2.13.0

A global coding-discipline spec for Codex, enforced by native Codex hooks + a rule-hit telemetry closed loop. Independent of oh-my-codex.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 34 file(s), 315 KB of source, external domains: github.com

Source & flagged code

6 flagged

hooks/tests/smoke.shView file

Lines 366-406shell

366mk_ph() { jq -cn --arg p "$1" --arg cwd "$2" '{prompt:$p,cwd:$cwd,session_id:"smoke1",hook_event_name:"UserPromptSubmit"}'; }

367OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'fix the authentication bug' "$PROJ")")"; is_context "$OUT" && ok "prompt matches MEMORY index → hint" || bad "prompt matches MEMORY index → hint" "$OUT"

368B="$(clog_count)"; run_hook memory-prompt-hint.sh "$(mk_ph 'fix the authentication bug' "$PROJ")" >/dev/null 2>&1; NEW="$(clog_new "$B")"

369{ printf '%s\n' "$NEW" | grep -q '"event":"suggest"' && printf '%s\n' "$NEW" | grep -q 'memory/auth.md'; } && ok "hint records a suggest event carrying surfaced filename(s) (A3 prereq)" || bad "suggest event carries filenames" "new=[$NEW]"

370OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'bump the version number' "$PROJ")")"; is_empty "$OUT" && ok "prompt no match → silent" || bad "prompt no match → silent" "$OUT"

371OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'fix the authentication bug' "$SANDBOX/noproj")")"; is_empty "$OUT" && ok "no MEMORY.md → silent" || bad "no MEMORY.md → silent" "$OUT"

372OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph 'fix billing invoice bug' "$NONGIT/child")")"; is_context "$OUT" && ok "prompt matches parent MEMORY outside git → hint" || bad "prompt matches parent MEMORY outside git → hint" "$OUT"

373# C4: 中文 index trigger words match a 中文 prompt (UTF-8 locale; on LC_ALL=C the

374# CJK class won't match and the hint fails safe rather than firing wrongly).

375printf '%s\n' '- [认证登录](memory/auth.md) — 认证登录会话处理' > "$PROJ/MEMORY.md"

376OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph '修复认证登录的并发问题' "$PROJ")")"; is_context "$OUT" && ok "中文 prompt matches 中文 index → hint" || bad "中文 prompt matches 中文 index → hint" "$OUT"

377OUT="$(run_hook memory-prompt-hint.sh "$(mk_ph '更新版本号' "$PROJ")")"; is_empty "$OUT" && ok "中文 prompt no match → silent" || bad "中文 prompt no match → silent" "$OUT"

378

379echo "== secrets-scan.sh =="

380if command -v git >/dev/null 2>&1; then

381 SECREPO="$SANDBOX/secrepo"; mkdir -p "$SECREPO"

382 git -C "$SECREPO" init -q >/dev/null 2>&1

383 mk_sec() { jq -cn --arg c "$1" --arg cwd "$2" '{tool_name:"Bash",tool_input:{command:$c},session_id:"smokesecrets",cwd:$cwd}'; }

384 printf 'const x = 1;\n' > "$SECREPO/app.js"; git -C "$SECREPO" add app.js >/dev/null 2>&1

385 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git commit -m clean' "$SECREPO")")"; is_empty "$OUT" && ok "commit clean staged diff → allow" || bad "commit clean staged diff → allow" "$OUT"

386 printf 'aws = "AKIAIOSFODNN7EXAMPLE"\n' >> "$SECREPO/app.js"; git -C "$SECREPO" add app.js >/dev/null 2>&1

Critical

Critical Secret

Package contains a critical-looking secret pattern.

hooks/tests/smoke.shView on unpkg · L386

Critical

Secret Pattern

AWS access key ID in hooks/tests/smoke.sh

hooks/tests/smoke.shView on unpkg · L386

387 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git commit -m addkey' "$SECREPO")")"; is_block "$OUT" && ok "commit staging an AWS-key-shaped secret → block" || bad "commit staging AWS key → block" "$OUT"

388 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git commit -m addkey [allow-secret]' "$SECREPO")")"; is_empty "$OUT" && ok "commit secret + [allow-secret] bypass → allow" || bad "commit secret + bypass → allow" "$OUT"

389 OUT="$(run_hook secrets-scan.sh "$(mk_sec 'git status' "$SECREPO")")"; is_empty "$OUT" && ok "non-commit git command → allow" || bad "non-commit git → allow" "$OUT"

390else

391 ok "secrets-scan.sh skipped (git not on PATH)"

392fi

393

394echo "== telemetry =="

395LOG="$SANDBOX/.codex/logs/agentsmd.jsonl"

396if [[ -r "$LOG" ]]; then

397 ROWS="$(wc -l < "$LOG" | tr -d ' ')"

398 SECTIONS="$(jq -r '.spec_section // "null"' "$LOG" 2>/dev/null | sort -u | paste -sd, -)"

399 ok "telemetry rows written: $ROWS (sections: $SECTIONS)"

400else

401 bad "telemetry log written" "(no $LOG)"

402fi

403# AGENTSMD_TELEMETRY_TAG stamps a `tag` field so verify/sandbox runs are excludable by audit.

404TAGHOME="$SANDBOX/tagtest"; mkdir -p "$TAGHOME/logs"

405CODEX_HOME="$TAGHOME" AGENTSMD_TELEMETRY_TAG=test bash -c 'source hooks/lib/rule-hits.sh; rule_hits_append "h" "block" "null" "§8-rm-rf-var" "sid-abcdefgh"'

406if [[ -r "$TAGHOME/logs/agentsmd.jsonl" ]] && jq -e '.tag=="test"' "$TAGHOME/logs/agentsmd.jsonl" >/dev/null 2>&1; then

•path = hooks/tests/smoke.sh kind = payload_in_excluded_dir sizeBytes = 40980 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

hooks/tests/smoke.shView on unpkg

bin/agentsmd.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2'use strict';

3// agentsmd CLI — a thin dispatcher over the L2 scripts in ../scripts. Each script

4// is an independently runnable Node program that reads process.argv and owns its

5// own output + exit code, so we SPAWN it as a child (never require it): its arg

6// parsing, JSON output, and exit status pass through byte-for-byte, and the L1/L2

7// isolation invariant (ARCHITECTURE.md §2 — this CLI adds no logic) stays intact.

8// Reached as `npx @sdsrs/agentsmd <cmd>` or, after a global install, `agentsmd <cmd>`.

10const path =

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6889 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Source & flagged code

6 flagged · loading source

hooks/tests/smoke.shView file

386patternName = aws_access_key severity = critical line = 386 matchedText = printf '...2>&1

Critical

Critical Secret

Package contains a critical-looking secret pattern.

hooks/tests/smoke.shView on unpkg · L386

386patternName = aws_access_key severity = critical line = 386 matchedText = printf '...2>&1

Critical

Secret Pattern

AWS access key ID in hooks/tests/smoke.sh

hooks/tests/smoke.shView on unpkg · L386

•path = hooks/tests/smoke.sh kind = payload_in_excluded_dir sizeBytes = 40980 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

hooks/tests/smoke.shView on unpkg

bin/agentsmd.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @sdsrs/agentsmd@2.10.0 matchedIdentity = npm:QHNkc3JzL2FnZW50c21k:2.10.0 similarity = 0.696 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/agentsmd.jsView on unpkg

9L10: const path = require('path'); L11: const cp = require('child_process');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/agentsmd.jsView on unpkg · L9

install.shView file

•path = install.sh kind = build_helper sizeBytes = 6889 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

install.shView on unpkg

Findings

2 Critical2 High4 Medium4 Low

CriticalCritical Secrethooks/tests/smoke.sh

CriticalSecret Patternhooks/tests/smoke.sh

HighPayload In Excluded Dirhooks/tests/smoke.sh

HighPrevious Version Dangerous Deltabin/agentsmd.js

MediumDynamic Requirebin/agentsmd.js

MediumEnvironment Vars

MediumShips Build Helperinstall.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings