registry / @theronap/cortex-mcp / 0.9.24

@theronap/cortex-mcp@0.9.24

Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.

Static Scan Results

scanned 13d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 20 file(s), 125 KB of source, external domains: cortex-console.vercel.app

Source & flagged code

2 flagged

lib/capture.mjsView file

Lines 1-36javascript

1import { readFileSync } from 'fs'

2import { homedir } from 'os'

3import { resolve } from 'path'

4import { createHash } from 'crypto'

5import { fetchCortex, classify, resolveBase } from './diagnose.mjs'

6import { extractSession } from './edge_extract.mjs'

7import { extractTyped } from './extract_typed.mjs'

8import { runMaterialize } from './materialize.mjs'

9import { redactSecrets } from './redact.mjs'

11// Fetch the node-type registry (global + this org's custom types) — the catalog the typed extractor

12// produces against. Best-effort: null on any failure (typed extraction is then skipped, never blocks capture).

13async function fetchRegistry(base, token) {

14 try {

15 const res = await fetchCortex(`${base}/api/node-types`, { headers: { Authorization: `Bearer ${token}` } })

16 if (!res.ok) return null

17 const j = await res.json().catch(() => ({}))

18 return Array.isArray(j.types) ? j.types : null

19 } catch {

20 return null

21 }

22}

24// Project name from the hook cwd — cross-platform. Windows hooks send backslash paths,

25// and splitting on '/' alone turned the WHOLE path into one garbage project slug

26// ("c-users-webst-onedrive-…", three-machine dry-run finding 2026-06-09). A session run

27// from the home directory itself is 'general', not a project named after the user.

28export function projectFrom(cwd) {

29 if (!cwd) return 'general'

30 try {

31 if (resolve(String(cwd)) === homedir()) return 'general'

32 } catch { /* unresolvable path — fall through to basename */ }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L16

33 const base = String(cwd).split(/[\\/]+/).filter((s) => s && !/^[A-Za-z]:$/.test(s)).pop()

34 return base ?? 'general'

35}

lib/redact.test.mjsView file

Lines 21-56javascript

21 ['ghp_' + 'd'.repeat(36), 'github'],

22 ['github_pat_' + 'e'.repeat(30), 'github-pat'],

23 ['AKIA' + 'ABCDEFGHIJKLMNOP', 'aws-akid'],

Source & flagged code

2 flagged · loading source

lib/capture.mjsView file

16if (!res.ok) return null L17: const j = await res.json().catch(() => ({})) L18: return Array.isArray(j.types) ? j.types : null ... L30: try { L31: if (resolve(String(cwd)) === homedir()) return 'general' L32: } catch { /* unresolvable path — fall through to basename */ } ... L87: // would recurse (and re-ingest the summarizer's prompt as a phantom session). Bail immediately. L88: if (process.env.CORTEX_SUMMARIZING) { process.stderr.write('cortex: summarizer subprocess, skipping\n'); return } L89:

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L16

lib/redact.test.mjsView file

41patternName = private_key_rsa severity = critical line = 41 matchedText = const ou...--')

Critical

Secret Pattern

RSA private key in lib/redact.test.mjs

lib/redact.test.mjsView on unpkg · L41

Findings

1 Critical2 Medium4 Low

CriticalSecret Patternlib/redact.test.mjs

MediumNetwork

MediumEnvironment Vars

LowWeak Cryptolib/capture.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

2 flagged

lib/capture.mjsView file

Lines 1-36javascript

1import { readFileSync } from 'fs'

2import { homedir } from 'os'

3import { resolve } from 'path'

4import { createHash } from 'crypto'

5import { fetchCortex, classify, resolveBase } from './diagnose.mjs'

6import { extractSession } from './edge_extract.mjs'

7import { extractTyped } from './extract_typed.mjs'

8import { runMaterialize } from './materialize.mjs'

9import { redactSecrets } from './redact.mjs'

11// Fetch the node-type registry (global + this org's custom types) — the catalog the typed extractor

12// produces against. Best-effort: null on any failure (typed extraction is then skipped, never blocks capture).

13async function fetchRegistry(base, token) {

14 try {

15 const res = await fetchCortex(`${base}/api/node-types`, { headers: { Authorization: `Bearer ${token}` } })

16 if (!res.ok) return null

17 const j = await res.json().catch(() => ({}))

18 return Array.isArray(j.types) ? j.types : null

19 } catch {

20 return null

21 }

22}

24// Project name from the hook cwd — cross-platform. Windows hooks send backslash paths,

25// and splitting on '/' alone turned the WHOLE path into one garbage project slug

26// ("c-users-webst-onedrive-…", three-machine dry-run finding 2026-06-09). A session run

27// from the home directory itself is 'general', not a project named after the user.

28export function projectFrom(cwd) {

29 if (!cwd) return 'general'

30 try {

31 if (resolve(String(cwd)) === homedir()) return 'general'

32 } catch { /* unresolvable path — fall through to basename */ }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

lib/capture.mjsView on unpkg · L16

33 const base = String(cwd).split(/[\\/]+/).filter((s) => s && !/^[A-Za-z]:$/.test(s)).pop()

34 return base ?? 'general'

35}

lib/redact.test.mjsView file

Lines 21-56javascript

21 ['ghp_' + 'd'.repeat(36), 'github'],

22 ['github_pat_' + 'e'.repeat(30), 'github-pat'],

23 ['AKIA' + 'ABCDEFGHIJKLMNOP', 'aws-akid'],