registry / @theokit/sdk / 2.13.1

@theokit/sdk@2.13.1

TypeScript SDK for the Theo agent harness — same surface, local or cloud.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 55 file(s), 4.91 MB of source, external domains: api.anthropic.com, api.cohere.com, api.deepinfra.com, api.jina.ai, api.mistral.ai, api.openai.com, api.usetheo.dev, api.voyageai.com, bedrock-runtime.us-east-1.amazonaws.com, generativelanguage.googleapis.com, github.com, openrouter.ai, us-central1-aiplatform.googleapis.com, us.i.posthog.com, www.googleapis.com, your-resource.openai.azure.com

Source & flagged code

1 flagged

dist/project.cjsView file

Lines 1-22javascript

1'use strict';

3var promises = require('fs/promises');

4var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/project.cjsView on unpkg · L2

5var crypto = require('crypto');

6var fs = require('fs');

8// src/internal/runtime/context/project-instructions.ts

10// src/errors.ts

11var TheokitAgentError = class extends Error {

12 name = "TheokitAgentError";

13 isRetryable;

14 code;

15 protoErrorCode;

16 metadata;

17 constructor(message, options = {}) {

18 super(message, options.cause !== void 0 ? { cause: options.cause } : void 0);

19 this.isRetryable = options.isRetryable ?? false;

20 if (options.code !== void 0) this.code = options.code;

21 if (options.protoErrorCode !== void 0) this.protoErrorCode = options.protoErrorCode;

22 if (options.metadata !== void 0) this.metadata = options.metadata;

Source & flagged code

1 flagged · loading source

dist/project.cjsView file

2L3: var promises = require('fs/promises'); L4: var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/project.cjsView on unpkg · L2

Findings

3 Medium5 Low

MediumDynamic Requiredist/project.cjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Source & flagged code

1 flagged

dist/project.cjsView file

Lines 1-22javascript

1'use strict';

3var promises = require('fs/promises');

4var path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/project.cjsView on unpkg · L2

5var crypto = require('crypto');

6var fs = require('fs');

8// src/internal/runtime/context/project-instructions.ts

10// src/errors.ts

11var TheokitAgentError = class extends Error {

12 name = "TheokitAgentError";

13 isRetryable;

14 code;

15 protoErrorCode;

16 metadata;

17 constructor(message, options = {}) {

18 super(message, options.cause !== void 0 ? { cause: options.cause } : void 0);

19 this.isRetryable = options.isRetryable ?? false;

20 if (options.code !== void 0) this.code = options.code;

21 if (options.protoErrorCode !== void 0) this.protoErrorCode = options.protoErrorCode;

22 if (options.metadata !== void 0) this.metadata = options.metadata;